DigiFirm Investigation Company

In this assignment, you assume the role of an employee of the DigiFirm Investigation Company. DigiFirm experienced strong profits last quarter and is interested in adding network traffic analysis tools to its lab. You have been asked to research sniffers and other network analysis tools.

There are several sniffers and other tools available for traffic analysis, including:

• Tcpdump and WinDump
• Wireshark
• HTTPSniffer
• Nmap
• Snort
• Retina
• CoreImpact

You must research these products, and then write a proposal in which you describe the tools’ capabilities and recommend two products to be added to DigiFirm’s lab, and you must justify your recommendations.

Deliverable:

For this assignment, you are to:

• Research these sniffers and other tools available for traffic analysis, compare the capabilities and, write a professional proposal in which you recommend two products for use in the DigiFirm Lab, and justify your recommendation.
• Your proposal should be at 3-5 pages in length.Be sure your report adheres to the University academic writing standards and APA style guidelines, citing references as appropriate.

Answer preview

Core Impact is a network analysis tool that assesses and tests security weaknesses throughout the firm. Security weaknesses or vulnerabilities give attackers an opportunity to tamper with the system. Attackers may eraser vital information, retrieve information and access individuals’ profiles. The benefits of core impact include;

• It reveals vulnerabilities and fixes them immediately. Some examples of security vulnerabilities include; very weak passwords, virus, buffer overflow, et cetera. It may also pre-test networks and systems before use.
• It tests across a broad range of risks areas including password and identities, network systems, wireless networks among others.
• It has an easy to use interface and has regular updates. Hence the network analysis tool will always be up to date.
• It also provides a penetration testing framework with the help of remote agents, exploit codes and discovery tools.

[804 Words]