ISYS 210 Lecture Notes - Lecture 4: Data Validation, Integration Testing, Wireless Network
22 Mar 2017
School
Department
Course
Professor
Document Summary
Internal audit and financial advisory: restructuring and litigation services, rick and compliance, transaction services, technology consulting, business performance improvement, data management and advanced analytics. 3. ) (cid:862)ha(cid:272)ti(cid:448)ists(cid:863) appearing to be someone else. I(cid:374)ter(cid:374)al (cid:862)trusted(cid:863) users (cid:373)ost do(cid:374)"t thi(cid:374)k of the(cid:373) as ha(cid:272)kers. A (cid:448)ast (cid:373)ajorit(cid:455) of the ti(cid:373)e is someone screwed up. Why do we still have software vulnerabilities: be(cid:272)ause (cid:449)e"re hu(cid:373)a(cid:374, no one expects software to work right anymore. Oft(cid:449)are (cid:449)as o(cid:374)(cid:272)e all (cid:449)ritte(cid:374) (cid:271)(cid:455) the de(cid:448)eloper. No(cid:449) it"s asse(cid:373)(cid:271)led (cid:449)ith pie(cid:272)es fro(cid:373) library vendors. Cheaper sources may be less secure (ex: openssl). Microsoft first to unabashedly sell bug fixes. E(cid:448)e(cid:374) (cid:862)free(cid:863) pat(cid:272)hes/dri(cid:448)ers are a sales opportu(cid:374)it(cid:455) ((cid:374)e(cid:449) produ(cid:272)ts, pro (cid:448)ersio(cid:374), maintenance contract). We"(cid:448)e (cid:271)ee(cid:374) (cid:272)o(cid:374)ditio(cid:374)ed to e(cid:454)pe(cid:272)t (cid:271)ugs a(cid:374)d (cid:374)ot (cid:271)e offe(cid:374)ded (cid:271)(cid:455) the(cid:373). (cid:862)you should ha(cid:448)e (cid:374)o e(cid:454)pe(cid:272)tatio(cid:374) of pri(cid:448)a(cid:272)(cid:455)(cid:863). Always test for the simplest way in that someone overlooked or was too lazy to fix: weakest link default passwords.
