For the project, 15 minute presentation, a Powerpoint presentation (< 15 slides), and an annotated bibliography of the sources upon which you rely.
Research a known exploit of a vulnerability from within the past 3 years.
A high-level description of the vulnerability
A more detailed discussion of the vulnerability. You should start by looking up the CVE in the National Vulnerability Database and use that as a way to find additional references.
Analyze what STRIDE aspects apply to the vulnerability
Analyze what aspects of the CIA triad were impacted
How the vulnerability was discovered and disclosed
How it was exploited and the impact
How it was resolved
Research Process:
Your research should be done in a few separate phases:
1. Start with a general search to find an interesting case for analysis. You can Google for news stories, look at Google Project Zero, security focused blogs, newsletters, or YouTube channels, and similar sources to find a high-level discussion.
2. Find the CVE in the National Vulnerability Database. This will be a key step in getting sufficient technical details about the vulnerability and will lead you to additional resources.
3. Look for third party analysis, discussion of exploits, responses from the product owner, patches, and other related information pertaining to the vulnerability. Again, the CVE will be a good resource for this part.
As you find relevant sources that you will use, add it to the bibliography with a brief annotation. The annotation should provide a high-level summary of the source and why the purpose for which you are using the source. It could be helpful to highlight key quotes and/or excerpts as well.
The post Vulnerability Case Study first appeared on COMPLIANT PAPERS.
