Answer some questions - Assignment Example

Information Technology Authentication, access control and auditing work together to establish a defense in layers for a networkby ensuring that only authorized users have access to data. This implies that authentication helps in verifying the identity of users through control mechanisms such as application of passwords and pin combinations (Ciampa 123). Similarly, the access control facilitates the defense in network layers by assigning users to various roles in order to grant permissions to access different functions.

In this way, the auditing ensures that a system conforms to the security requirements of an individual or an institution. As a result, authentication, access control and auditing work together to establish network defense through the verification procedures, assigning roles to users and installing control mechanisms that curb errors and frauds. A breach of the CIA triad for a campus police department at a mid-sized private university will allow access of confidential information to third parties.

This can lead to loss of data through modification, alteration and disclosure, leading to harmful risks to students and the institution’s database. As a result, hackers can obtain personal information of students and use them for illegal activities like cyber bullying, leaking of examination or tampering with the management information systems. Another breach is that criminals or hackers can access the police methods of tackling crime and use them to evade arrests. This is because new systems of operations are normally taught in the campus police departments.

The two-factor authentication I would use is the security token since it ensures that every police officer possesses a physical device that shall allow him or her to access the criminal database. However, the potential problems of this new authentication system are that it can be stolen or lost easily, the system provider can face hacking or the cryptography can be cracked. This implies that the loss of the token can permit an authorized person to access the database. It is also apparent that hacking of the token can affect their security purposes, especially if the provider has not installed tight measures.

OSI model portrays and standardizes the internal operations of a communication system. This occurs through the partitioning of the communication system into concealed details of the functionalities. The OSI model is essential for network security because it simplifies the communication between computers through internet connectivity in a secure manner (Ciampa 125). Another advantage is that the OSI model enables the sending of numerous bytes at a single time to other devices. It also standardizes interfaces during the communication process in the systems.

The various network investigation tools available online includes L0phcrack, Domain Dossier, John the Ripper and Dictionary attack. L0phcrack is a password recovery system that strengthens window passwords. Domain Dossier is essential for scrutinizing domains and IP addresses in the internet applications. The Dictionary attack is model that breaks password-secured computer through using dictionary words as passwords. Digital evidence is legal information transmitted in digital format and be act an evidence in court cases.

In this regard, investigators face problems using such materials because they can be fabricated by hackers or software experts. Another problem is that digital evidence requires encrypted passwords, which should not be lost or tampered with by third parties (Ciampa 205).Work CitedCiampa, Mark D. Security+ Guide to Network Security Fundamentals. Boston, MA: Course Technology, Cengage Learning, 2012. Print.