Suppose that you have been alerted of a potential incident involving a suspected worm spreading via buffer overflow techniques, compromising Microsoft IIS Web servers. As the IR Team leader, it is your responsibility to determine the next steps.
Write a 2–3 page paper in which you:
- Explain in detail the initial steps that would need to be made by you and the IR team in order to respond to this potential incident.
- Construct a process-flow diagram that illustrates the process of determining the incident containment strategy that would be used in this scenario, and identify which containment strategy would be appropriate in this case, through the use of graphical tools in Visio or an open-source alternative such as Dia.
- Note: The graphically depicted solution is not included in the required page length.
- Construct a process-flow diagram to illustrate the process or processes for determining if or when notification of the incident should be relayed to the upper management, and explain how those communications should be structured and relayed through the use of graphical tools in Visio or an open-source alternative such as Dia.
- Note: The graphically depicted solution is not included in the required page length.
- Detail the incident recovery processes for the resolution of this incident.
- Use at least three quality resources in this assignment.
Include page numbers.
Use 1-inch margin
Use numerals (1, 2, 3, and so on) or spell out numbers (one, two, three, and so on).
Double space body text in the assignment.
Use consistent 12-point font.
Use section headings to divide separate content areas. Center the section headings on the page, be consistent, and include at least two section headings in the assignment.
0 comments