Question

"Attacking Fraud" Think about a company where you have worked that had a case of employee theft or fraud. (If you do not know of such a company, research online for a case of company theft or fraud.) Please describe the fraud. Your description should include an analysis of the discovery, time period required for the discovery, and factors in the fraud triangle contributing in the fraud. Recommend the policies, procedures, and controls necessary to prevent this type of fraud from reoccurring. (Note: do not give personal names of individuals or names of specific companies in your answer.)

Answer 1

IT tools to control and detect fraud or attacks: . The different types of fraud and attack identification are data manipulation, omitted information, identify threat and impersonation, false identity, etc The needs to be a proper way to identify and stop such threats to endanger the process of work. » Some of the tools are listed below . o Nessus: It is network vulnerability scanner; it helps in remote and local security checks Snort: network intrusion detection and prevention system, it detects worms and exploit attempts and all other suspici Hping: It is a network scanner, whichis used to test firewall rules and perform advanced TCP/IP related attacks Kismet: A network detector, packet sniffer system Paros proxy: It has web traffic recorder, hash calculator, testing scanner for web application attacks Sniffer: It is a tool which is packet sniffer Ethereal: A tool which captures and analyses network packets Tripwire: This tool helps in keeping track of all the files altered in the system o ous behaviours o o o o o o