Vaibhav Shukla

This is a hard question to answer where I feel that there are always some new threats in the market and its the same case like a zero day vulnerabilities where a lot of people do become victim of the threat.
I do suppose a solution to keep mobile safe is by not jailbroking your devices.The devices when get jailbroken usually surpasses a lot of…[Read more]

This is excellent article and I do feel if the organization gets struck in some ransomware demand then they must approach these labs but this cannot be a preventive control and still doesn’t guarantee of complete safety and organizations should invest in data backups

I agree somewhere to this article as most of the common people who are not much aware of the cyber security feels that the Anti-Virus is the only robust solution for security available and if they have antivirus on their PC they are safe from all type of attacks.This was a conception even faced by me when I used the PC for first time and the…[Read more]

Still it stands as a question to me how can they explain cyber-security to kindergarten kids.But if they are planning to do it then there must be some idea behind it.If the plan gets success then a lot of countries should try to replicate in their education system because the humans are the biggest vulnerability for attackers to target and it can…[Read more]

Its really a great article and even I had less knowledge on 3rd party vendors security procedures.I think 2 things can play an important role as per your suggestions-
1)A charter or SLA should be signed by the 3rd party vendor before going into the business and the charter should cover all security boundaries where the vendor accepts to follow…[Read more]

There can be a cheaper solution .Most of the home PC users should probably keep some of their sensitive data backed in the cloud .Most of the cloud service providers provide some GB space as free of cost .In case the home PC is compromised users have their data backed up as most of the cases of ransomware you dont have 100% surety to get back the…[Read more]

Its very important for healthcare industry to revamp their security considerations.In present times any medical device on the network could be a probable target of hackers.When we hear about healthcare industry most of the security policies deal with protecting the patients PHI .But series of attack on iOT devices clearly proves that if healthcare…[Read more]

As mentioned by you its difficult to prosecute and collect evidences in the case of international cyber crimes.
As of now there is still no strong international charter available which defines procedures,support for investigation in such cyber crimes. A russian backed treaty in UN was rejected in 2010 due to differences between developing and…[Read more]

I really like the point of mentioning the proper protocols and policies are in place.The work of forensic expert will be easier if he can find the log files.Most of the auditor do recommend using log files but the organizations ignore them.Many organization have a retention policy but the data may not be available for the particular date when…[Read more]

Yeah you have used an excellent example to define this but I feel tracking IP address may not be enough to sue a person in court.There are cases when people hack into somebody network and use his network to hack and bring damage to other systems.The method do deals with tracking the user with IP address and then depositing his personal computer…[Read more]

I separated the word forensics with digital forensics as the forensics is something related to the evidence admissible in the court.So it can be also a fingerprint collected after a crime for investigating criminals so when we jump to digital forensics its collection of evidence in the digital world

Forensics is the process of using scientific knowledge for collecting,analyzing, and presenting evidence to the courts.Forensics deal with more of the post crime scene.When we add word digital to it then digital forensic analysts follow crime footprints to investigate incidents and track activities in the electronic and cyber domain.Digital…[Read more]

D14.1: Discussion Topic 1

There is a provision or an exception in the HIPAA called Privacy Rule which allows health care providers to share protected health information for treatment purposes without patient authorization, as long as they use reasonable safeguards when doing so. These treatment communications may occur orally or in writing, by…[Read more]

Regarding the Mirai worm attack which deviates my attention with fancy name I think it was actually exploiting one of the type of router which lets this malicious viruses able to get through unsecured ports.It targets unsecured transmission control protocol (TCP) ports on routers. After entering through port 7547, the attack caused routers to…[Read more]

The case is more alarming as the guesses could work out for both the cases.Case 1 where the card PAN is not available and case 2 where PAN is available with only difference in number of attempts required.
The researchers believes that 2.5 million euro stolen from Tesco Bank by hackers might have used same technique which means the technique has…[Read more]

I think the last DDOS attack which took place last month and bought down many websites across USA had made use of IOT devices as botnet to launch the attacks.This loophole can be a serious concern as the cameras can be made to work as bot net by hackers who can take control over it through the backdoor malware reported