As a group, analyse and contrast two publicly available incident reports, in either English or Japanese, by mobilizing the knowledge you gained through the cybersecurity lectures.

  1. For each incident, provide a detailed summary of the incident report toward cybersecurity professionals, by fully mobilizing concepts that you learned through these lectures. Create a timeline of the incident, as well as a fishbone diagram, that illustrates root cause and other important events in order to help with the understanding.

  2. Identify technical factors that led to each incident. Based on the real timeline of the particular incident, identify two critical periods where technical intervention was necessary.

  3. Identify human factors that led to each incident. Based on the real situation of the particular incident, describe how best you would deliver risk messages, as an external security consultant, in the two critical periods that you identified in the step 2.

  4. After finishing steps 1 to 3 for each incident, analyse and contrast the two incidents, for instance by highlighting similarities and differences.

As a group, steps 1 to 3 can be done by splitting the group into two small groups, effectively inviting group work of 2 - 3 people, and step 4 can be done by the big group (your group) of 5 to 6 people. You can decide the members in each sub-group.

*You need to carefully choose incidents so as to proceed with step 4.

Communication Protocol

  • For the record, please use the provided group mailing list to communicate with each other.
  • In case you decide to have a WebEx meeting, please invite the group mailing list. TAs might randomly enter the meeting, just to make sure everything is fine.

Deliverables

  1. Incident 1 report (step 1-3)
  2. Incident 2 report (step 1-3)
  3. Analysis and contrast of the 2 selected incidents. (step 4)

Submission Format

[groupNo]-incident-analysis.zip
(1) ├ incident1.pdf
(2) ├ incident2.pdf
(3) └ step4-analysis.pdf
  • Your name, student ID, and laboratory must be in your report.
  • Your group number must be in your report
  • Submit to cybersec-2020＠is.naist.jp.
  • Both Japanese and English reports are acceptable.

Deadline

14 July 2020 23:59:59