370 (2)
John_matt
replies_needed.docx
Reply needed 1
hat is the relationship between transmission media and signaling methods? Explain your response.
Transmission media consist of physical communication pathways which include copper cable, wireless (satellite), or fiber options. These networks can run for milion of miles and, even under water. I’m not sure about sand in desserts. These network have built-in redundancy for rerouting in the event of a natural disaster or other. Entire networks are operative and interdependent upon successful communication whether telecommunications-data-telephony, internet or voice activations.
Signalling is triggered by different sensors within the communications networks which can be asynchronous for two-communications pathways. One example -- think about biometrics or voice activation with sound acoustics travelling signalling messages to drive you to a specific location. Also, texting or emailing images, videos, etc. Transmission by communication signals.
What is the role of codec as it relates to transmitting signals over a network?
Codec is a digital program using Java or Python (Gaming) programming languages written to encode or decode streaming videos or encrypt data for extra security. The Codec can do reverse coding to playback videos, v-conferences, etc.
From your perspective, what type of signaling appears to be the most efficient way transit data and information over today’s networks? Explain your response.
For myself -- the voice activation is important feature especially if you need it while driving or multitasking different project. Also, with voice activation you can use it to acquire a response to answer questions, etc. quickly. Also, sending text messages via telephone. Sending selfies, or photo in milliseconds as well as responding can be fun. The digital world of networks can be extremely wonderful despite some of the security issues that may show up from time to time.
Reply needed 2
· What is the relationship between transmission media and signaling methods? Explain your response.
The relationship between transmission media and signaling methods is akin to a railway locomotive needing to use train tracks. Transmission media are the "tracks", whether it be copper wire, coaxial cable or fiber optic. The signaling methods are the different type of railway locomotives that use those "tracks". Most computer networks use digital signaling, it is one of the two types of signaling with the other being analog. There are also two types of ways for signals to transmit, one is baseband where the whole "track" is being used to send one message at a time and then there is broadband which is equivalent to a bunch of tracks being available for use, each train has it's own track and trains can pass each other simultaneously this way (Wilson, 2007).
Wilson, K. (2007, October 12). Informit. Retrieved November 03, 2016, from http://www.informit.com/articles/article.aspx?p=683070
· What is the role of codec as it relates to transmitting signals over a network?
A codec is essentially just way to code and decode a digital stream or signal, codecs also have the ability to compress data size during the encoding process and reverse that process during decoding. There are codecs for audio, video and many other things, some provide compression and some do not.
· From your perspective, what type of signaling appears to be the most efficient way transit data and information over today’s networks? Explain your response.
From my perspective the most efficient way to transmit data and information would have to be with light. Using an electrical signal to create pulses of light that then travel through a fiber optic cable to be decoded and turned back into electrical signals is the best and most reliable way to transmit a signal in today's network. According to (Collins, 2015) "According to the FCC, fiber providers consistently offer 117% of advertised speed, even during times of peak demand". They are also more reliable because they do not carry an electrical signal which will lead to faster medium degradation than light. Fiber optic cables should be an industry standard for residential applications as soon as their is an infrastructure to support it in my opinion.
Collins, T. (2015, December 28). 8 Advantages of Fiber-Optic Internet vs. Copper Cable. Retrieved November 03, 2016, from https://www.atlantech.net/blog/8-advantages-of-fiber-optic-internet-over-copper-cable
Reply needed 3
Transmit means to issue signals to the network. Transmission media are the physical pathways that connect computers, devices, and people on a network; the signals used are analog or digital. Codec is Short for compressor/decompressor, a codec is any technology for compressing and decompressing data. In telecommunications a device that encodes or decodes a signal. For example, telephone companies use codecs to convert binary signals transmitted on their digital networks to analog signals converted on their analog networks. Thank you for your post last week I hoped you enjoyed this class.
-Kandy Wilson
Reply needed 4
Transmission media is a pathway that carries info from the sender to the receiver. It is also classified by two groups. 1) Wired or Guided media or Bound Transmission Media. 2) Wireless or unguided media or Unbound Transmission Media.Unbound transmission media are the ways of transmitting data without using any cables. Bound Transmission Media are the cables that are tangible or have physical existence and are limited by the physical geography. Great post overall.
References: Traditional Transmission Media for Networking and Telecommunication: www.informit.com/articles/article.asp
From this Section is very Important
Responded to discussion topic with well supported and outside research or assigned readings as appropriate, add value to the discussion, and demonstrate student’s understanding of concepts.
Reply needed 5
Category cabling is still a major part of wired connectivity between networking devices. Many home users will have wireless technology and that’s fine because the bottleneck for their “true speed” is derived from the Internet Service Provider (ISP). In commercial settings CAT cabling provides better security and speed when compared to any wireless technology out to date. There are many types of CAT cabling, with the most prominent being CAT 3, CAT 5, CAT 5e, CAT6, CAT6a, CAT 7, and now CAT 8.
(Messerer, 2016)
Many of the latest category cables have more stringent length restrictions then the common 100 meters for reaching their maximum speed capabilities. These cables are trying to compete with the speeds of fiber optic cables that are much faster but also more time intensive and costly to implement. The latest cabling CAT 6a – 8 is shielded (STP or FTP) for attenuation on the line. This makes the cable more costly and troublesome to terminate, but it’s the factor that gives it the ability to run at higher frequencies. When choosing what type of cable to use, keep in mind what speeds you truly need now and in 5 years.
Messerer, H. (2016, January 8). How to Tell CAT Data Cables Apart. Retrieved October 18, 2016, from http://machinedesign.com/cables-connectors-enclosures/how-tell-cat-data-cables-apart
Reply needed 6
Network topology is a schematic description of a network arrangement, connecting various nodes through lines of connection. There are different types of network topologies Bus topology, Star topology, Mesh topology, Ring topology, Hybrid topology and Tree topology
Bus topology is a network in which every computer device or nodes are connected to a single cable (Beal, 2015).
Advantages of Bus topology
1) It is easy to understand.
2) It is used in a small network.
3) It is cheaper to set up than the other networks.
4) The capable that is required is lesser compared to other network topology.
5) It is easy to expand joining two capable together.
Disadvantage of Bus topology
1) There is a limited cable length which means a limited number of nodes.
2) The whole network will go down, if there is a problem with the cable. That is it has only one point of failure.
3) Bus topology is slower than the ring topology because there will be too much traffic on one line at the same time.
4) If network traffic is heavy or nodes are more, the performance of the network decreases.
Reference
Beal, V., (2015) What Are Network Topologies? Retrieved from http://www.webopedia.com/quick_ref/topologies.asp
Reply needed 7
One type of Network topology is the Bus Topology. In a BUS Topology, “every computer and network device is connected to a single cable”(Types of Network,n.d.) With this topology, data is transmitted only in one direction. Every device connects through this one single cable. When one device communicates with another, a message is broadcasted across the wire. Every node on the backbone or cable will see the message, but only the intended device will process the request.
There are several advantages to this topology. This is a cost effective approach, that is ideal for small networks. Its easy to expand by joining another cable. Its also a very easy topology to understand.
There are some disadvantages as well. It is slower than other topologies. Network performance is degraded by heavy traffic or additional nodes. Each end of the cable requires a terminator. Perhaps most important, if the cable fails, then the entire network is down.
References
Network Topology Diagrams, Free Examples , Templates Software Download (n.d.) Retrieved October 27, 2016 from https://www.edrawsoft.com/Network-Topologies.php
Types of Network Topology.(n.d.) Retrieved October 27, 2016 from http://www.studytonight.com/computer-networks/network-topology-types
Reply needed 8
Based on the two articles I read I feel the cyber implications out there are real for the NSA. If what he is saying is true it means that the NSA does have policies on protecting its employees. These polices include using cover names and down playing your position in the company. Also Snowden states that he had to fake working another job. It’s not known if this is all true or not but it would make sense due to the intelligence gathering the NSA does. These policies work best if they are not well known to the mass public. If it is all true then yes anyone who is in a field like Snowden is trained to be a spy. It would be procedural.
This also proves a point on how limited cyber law is that by committing a crime like this can be escaped by running to a place like Russia or any other country with extradition treaties with the United States. Beside that for cyber procedures the NSA is doing what they must do to best collect intelligence. Their employees would have to be trained in discretion. The issue is that Snowden was able to collect his own information by simply using a USB drive. He snuck the USB stick in his show and security did not catch it (Gaver, 2014). For this insider threat not only did physical security fail but also not controls in place to limit USB attached devices? Those two policies should be looked into to stop repeat offenders (copy cats).
Gaver, W. (2014). Snowden weak link: Copying to USB device. Communications of the ACM, 57(7), 8.
Reply needed 9
Solms & van Heernden, 2015 stated a number of consequences to the Edward Snowden leaks.
Lavabit, a secure email service, was shut down by its creator on August 8, 2013. This was due to the FBI requesting the SSL keys that would allow the FBI to decrypt account information. Even though the FBI stated they only wanted the keys to obtain access to Mr. Snowden’s account they would still have access to any other user’s information that used the service (Solms & van Heernden, 2015).
Google, and Yahoo were both extremely concerned that US government agencies appeared to be intercepting large amounts of data via communication links to their data centers. Google expressed that they would be expanding their encryption methods to larger areas of their systems in response to the information provided in the Snowden links, and both companies vehemently denied ever giving the NSA or any other government agency permission to access their data (Solms & van Heernden, 2015).
RSA Security advised its customers to stop using specific software that may contain “backdoors” installed by the NSA. It was later discovered that RSA was paid $10 million to use the software with a default setting that allowed access via this backdoor (Solms & van Heernden, 2015).
A very concerning revelation was that the NSA had used a combination of supercomputers and technology companies that compromised cryptographic standards that The National Institute of Standards and Technology (NIST) had recommended in its development process (Solms & van Heernden, 2015).
David Lyon shares his thoughts about how the revelations of the leaks have shed light on the ethical considerations of “Big Data”. With the storage capacities of “Big Data” combined with the computing power of modern CPU’s tremendous amounts of information can be analyzed. This data has a very real capacity to be abused just as easily as it has the capacity to improve security. Public perception of privacy will shape the future of what is allowed and what is deemed too much (Lyon, 2014).
References
Lyon, D. (n.d.). Surveillance, Snowden, and big data: Capacities, consequences, critique. Big Data & Society, 1(2). doi:10.1177/2053951714541861
Solms, S. v., & van Heernden, R. (2015). The Consequences of Edward Snowden NSA Related Information Disclosures. Iccws 2015-The Proceedings of the 10th International Conference on Cyber Warfare and Security: ICCWS2015 (p. 358). Academic Conferences Limited. Retrieved from https://www.researchgate.net/publication/275019554_The_Consequences_of_Edward_Snowden_NSA_Related_Information_Disclosures
Reply needed 10
Threat model analysis (TMA) is a method of analysis that will assist in determining the best security practices for a product, application, network, or environment. It is a structured process that enables an organization address security risks using a seven step process. One of the main benefits of using TMA is it allows for the inclusion of security baked in from the very beginning of the design. This in combination with thorough documentation created during the process gives a reviewer a 365 understanding of the project. Furthermore, TMA allows for a reviewer to understand the scope and entry points to the project and a deep grasp of the threats and risks associated with the project (MSDN, 2016).
The seven steps of the TMA include:
· Step 1. Collect Background Information
· Step 2. Create and Analyze the Threat Model
· Step 3. Review Threats
· Step 4. Identify Mitigation Techniques and Technologies
· Step 5. Document Security Model and Deployment Considerations
· Step 6. Implement and Test Mitigations
· Step 7. Keep the Threat Model in Sync with Design
The TMA process is universally applicable to nearly any project. Additionally, using the TMA process allows for an uncomplicated view of a project in simple segmented parts. This low level view allows for reduce complexity and reduce the risk of scope creep. One of the easiest mistakes a team can make is scope creep. Scope creep is where a team starts to assess and analyze parts of project that out of the scope of the job. Using TMA mitigates these risks by clearly defining the scope of the project.
Works Cited
MSDN. (2016). Threat Model Analysis. Retrieved from https://msdn.microsoft.com/en-us/library/aa561499.aspx
Reply needed 11
Threat Model Analysis or (TMA) is a very interesting topic. This is a basic tool in a business arsenal like any other. It can get overused or abused if not used properly. However, if used appropriately, it can be very effective at enhancing the security of the application process. It creates a relationship with the application developers and enhances the communication between developers and designers. It allows the application to be redesigned to fit todays cyber security needs.
A Threat Model Analysis is, “an analysis that helps determine the security risks posed to a product, application, network, or environment, and how attacks can show up. The goal is to determine which threats require mitigation and how to mitigate them” (Microsoft, 2016). When performing a TMA testers are giving a very logical and detailed summary of the data flow, to and from whatever is being analyzed. In this way technicians, can clearly see vulnerabilities and gaps in flow, in communication patterns, and devices. It is those vulnerabilities and gaps that techs are looking to mitigate. Mitigation can only take place when the problem is noticed.
The TMA also acts as a guide as to see which of the areas is most urgent to mitigate and which are not. The TMA has specific steps. These steps are, “1. Collect Background Information; Step 2- Create and Analyze the Threat Model; Step 3- Review Threats; Step 4- Identify Mitigation Techniques and Technologies; Step 5- Document Security Model and Deployment Considerations; Step 6- Implement and Test Mitigations; and Step 7- Keep the Threat Model in Sync with Design” (Microsoft, 2016)
Step 1, “Collect Background Information” (Microsoft, 2016) is where the bulk of the information is generated. It must be concise. The data collected must include: “Boundaries and scope of the architecture, Boundaries between trusted and untrusted components, Configuration and administration model for each component [and] Assumptions about other components and applications” (Microsoft, 2016) This would be a critical step in performing a TMA. The correct background information must be collected or the rest of the TMA process cannot move forward with valid information. This would void the entire TMA process. It is also during this step that techs are going to develop the Data Flow Diagram or DFD which is very important during the meeting and the next steps.
Steps 2 in the TMA process are fairly simple to understand, “Create and Analyze the Threat Model. In step 2 the gaps and vulnerabilities are simply written down. Technicians give a brief description of what the threat can do, what assets it is going to effect, and what type of impact it may cause to the organization.
Step 3 is where technicians “Review Threats” (Microsoft, 2016). Developers are basically taking the threats and the impact analysis, and rating them per, “Damage potential, Reproducibility, Exploitability, Affected users, and Discoverability” (Microsoft, 2016). This step is a little tricky for me because, I did not find any standard method for a rating system. The rating system of choice seems to be a scale from 1-10. However, there was nothing to tell me how the scaling was applied. Is 1 high or low? Is 10 great or terrible? I think the rating system needs to be standardized according to the team.
Step 4 “Identify Mitigation Techniques and Technologies” is where the information collected in step 3 is compiled. The information on impact, and risks are discussed, and the ideas on mitigations are introduced. This discussion leads to mitigation strategies, and possibly the success of the application.
Steps 5-7 are joined together. First the information from the discussion sessions is formally documented. Next, the team fixes the design and does the re-test. Lastly, the team needs to make sure all aspects of this new application fit with the rest of the organization existing legacy equipment or network architectures. Checking with other TMA’s is a quick way to make sure that everything will come together in the end. This process can work very well in a business to improve their cyber security. It indicates where the vulnerabilities might lay, or a gap could be discovered and then gives the organization a process to prioritize and fix the areas of concern. The only thing it does not do, is a cost or budget analysis. Dealing with the high-profile risk is the first step, but, the cost analysist must be done separately. It is important because if the cost of mitigation is too high, then the application may not be an effective use of the organizations funds. I believe this is would be a good tool for businesses to use or have in their arsenal of choices in defensive strategies.
Microsoft. (2016). https://msdn.microsoft.com. Retrieved from https://msdn.microsoft.com: https://msdn.microsoft.com/en-us/library/aa561499.aspx
Microsoft. (2016). https://msdn.microsoft.com. Retrieved from https://msdn.microsoft.com: https://msdn.microsoft.com/en-us/library/aa562036.aspx
