Modules 1-4

In section 2.4 we learned about vulnerability concerns. Something specific I learned was the importance of being very careful when working in a root directory. There may be times that I need to work with administrator privileges as a superuser so any work performed in the root directory must be checked and double checked before implementation. Without a safety net a mistake working in this environment could be catastrophic. Working as a super user requires meticulous attention to detail.  That isn’t to say that working as a regular user doesn’t require precision, but the costs of mistakes aren’t as high while working with limited privileges.

Understanding that every person subscribes to different ethical theories I will ensure I am safeguarding the equipment I work with. In section 3 we learned about physical security measures to keep our equipment and networks safe from actors that may act unethically. An actor may feel the ends justify the means because their belief system is utilitarian. Don’t share that viewpoint. I feel I am more of a divine theory ethical perspective person.  If an actor’s focus is on achieving their desired outcome at any cost, then access to equipment must be protected from those actions. Restricting access to equipment, preventing unwanted disclosure of information, and preventing loss of assets from situations like fire or theft are ways I will act ethically in protecting the equipment entrusted to me. This means I need to stay current on threat trends and security measures to combat those threats. I will also ensure I am familiar with and abiding by the principles of the ACM Code of Ethics and Professional Conduct. The ACM code is the standard for computing professionals that outlines ethical actions we can follow to ensure we are acting ethically.

The job of a cybersecurity professional is as much a reactionary role to active threats as it is a proactive role in preparing and protecting systems for potential attacks. Technology continues to evolve so a cybersecurity professional needs to be able to evolve as well. I feel cyber attacks and the responses cybersecurity specialist employ are like healthcare’s response to viruses.   When a new attack is introduced to a system that is like a virus seeking a host. The response to the attack would be like a physician administering medicine to reduce or stop symptoms. While this happens cybersecurity specialist would look for ways to strengthen their systems from future attacks just as medical professionals test new drugs to develop vaccines. The reaction to the attack is where cybersecurity specialists must take an active role.

An example that I present to solve security challenges facing humanity is user control implementation. As we learned in section 2, insider actors pose a very real threat and are often overlooked as threat agents. Educating users on proper protocols is the first way to promote safe computing use. Ensuring appropriate level privileges for fellow employees is another action I will take to limit my company’s exposure to data breach. Additionally, I will monitor and audit implemented security protocols to ensure compliance. The exchange of data from outdated systems or under protected systems is a worldwide security challenge that cybersecurity specialists should be working to contain. As artificial intelligence technology is implemented in more situations the risks of data mining grow exponentially. Owners of data have the right to decide if their data is shared with others. Not every piece of leaked data will be used maliciously but there is the possibility it could be so I will make efforts to protect the systems I work on from data breaches and intrusion.

 Modules 5-7

Something I learned that will be useful in my career is material covered in module 6. I expect to be tasked with monitoring and modifying user controls in my duties as an IT professional. One example that sticks out to me is understanding privilege creep. I can envision someone leaving a position and the need to be mindful of changing privileges. I think many of us assume that once a person has achieved a certain level of privileges why should that change with a new job.

Module 7 covered cryptography and the importance of encryption when it comes to data. Emphasizing privacy is an ethical use of skills I learned in this chapter. Combining different methods of encrypting data will allow me to ensure I’m doing all I can to reduce the chances of a data breach.

Solving challenges related to cybercrime is why I choose to study this field. An example of a way to respond to those challenges is covered in module 8, wireless defenses. Wireless hacks have been and continue to be a great concern in the world of cybersecurity. By understanding system configurations and ensuring I am not implementing weak systems I can make the systems I work on less of a “soft target”. Hackers seek ways to intrude and target defense is a big key to whether there is an actual breech or just a sniff to try to access an easy target. 

 Modules 8-11

Modules 8-9 of this course introduced us to security assessments, incident response, forensics, and recovery. Module 10 covered risk management, governance, and compliance. In Module 11 we completed a research assignment on country other than the United States to learn about cybersecurity laws from a worldwide perspective. My chose region was the United Kingdom (UK) and I learned how cybersecurity and information technology laws in the countries of Scotland, Northern Ireland, Wales, and England are applied. The UK excels in notification of data breaches and is taking steps to improve an already robust cyber community. Investing in cyber is a proactive measure that will continue to benefit the UK in the future as more and more technology emerges.

Skills I learned in modules 8-11 that I will be able to use to promote a safer use of technology include penetration testing, intrusion detection, and analyzing network attacks. Understanding the need to test organization defenses I will use the knowledge I gained to help improve the systems work on.  Some skills I learned from these modules to promote ethical use of technology include understanding how to mitigate an incident, manage logging, and create backups of data that can be recovered as response to attacks. Time and effective defense strategies are what determine whether a minor breach becomes a major breach. I will use the information I learned to ensure I am responding appropriately to minimize damage and also ensure I am able to retrieve the original data that may have been altered on the servers I work on. The importance of organizational security policies was stressed, and we learned how to complete audits as part of our monitoring of workstations.

Coupling the skills I ‘ve learned from the exercises in TestOut, along with the knowledge I gained from my research projects I will be able to use the information I’ve learned as I continue my career in cybersecurity. I plan to work in the Veteran Affairs or Veteran Healthcare system and there will be circumstances that I may need to mitigate an attack on government servers. Understanding the US laws and the organizational regulations of the government will help me formulate the appropriate responses to counter attacks on government servers and prevent data breaches.

A calculator program I created...

Learning how to use a GUI interface was the best part of these modules. Although the back end of programs may not be my favorite part of programming it is a feeling of accomplishment being able to create a simple user interface from the program code. 

I worked alone on the mini project because at times I needed to slow down to figure things out. I was concerned that by working with others I would feel more anxiety to try and keep up or learn and apply things in the same time frame as others. In reviewing the programs of others, I was impressed that one of our classmates made a GUI of the project. I also learned where I was missing things in my code so by reviewing the code others created, I was able to revise my program to address those issues.