CSCI 2776 Columbus State Community College SolarWinds Supply Chain Attack Group Paper – Description
Start – SolarWinds Supply Chain Attack Group Wiki – SU 23
Develop and add content to the SolarWinds Supply Chain Attack Wiki of Information that your class is developing concerning the unfolding Breach of SolarWinds, potentially the most far-reaching cyber breach crafted against the U.S. Be the first to set the foundation of a breach you will want to study intensely as we confront the brave new cyber world we are in.
Add at least one written page (at least 500 words single-spaced – does not include referencing/documentation) on a new element of the topic: or add a page worth (at least 500 words single-spaced – does not include referencing/documentation) of significant update/s, train of thought, or clarification to an existing thought train already posted to the Wiki. I will grade you on your research and thought processes.
Research the Cybersecurity & Infrastructure Security Agency (CISA) coverage of “APT Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations.
Research SolarWinds and FireEye, Sunburst, etc. via the Common Vulnerability and Event (CVE) list;
Research SolarWinds and FireEye via the National Vulnerability Database (NVD);
Research Solar Winds, FireEye, Sunburst, etc. via SecurityWeek
Your Own Research: Expand your research via other open-source entities and add to the Wiki.
Some questions to consider for your choice of what to write. Each of these questions by themselves can generate 500 words with of content relatively easily:
What methods were used by the adversary?
What is an Advanced Persistent Threat (APT) and how does this attack reflect the presence of an APT?
Outline the threat sequence using the Kill Chain…what is the kill chain and who developed it?
Who was responsible?…document how you may know this.
What capabilities has this adversary developed?
Who has been or potentially will be affected?
What are the long-term harm possibilities?
What existing defenses need to be engaged?
What “out-of-the-box thinking” is needed?
What mitigation methods have been used and/or what methods are being developed?
What training could have prevented this?
What defensive/monitoring systems might have prevented this?
Is this a revolutionary, earth-shaking, novel event or the next round in the evolution of Cyberwarfare?”
How will this change the way we do business?
The post CSCI 2776 Columbus State Community College SolarWinds Supply Chain Attack Group Paper first appeared on .
