The 500-bed Chicago Hospital has been hit by a ransomware attack that has encrypted entire hard-drives on computer systems across the network, including patient records and systems running medical equipment such as MRI, CAT and X-ray scanners. The IT staff are not sure what type of ransomware it is. After several unsuccessful attempts to restore the network, and with just two days before the deadline, the hospital has contacted the FBI and Delta Force Security Consultants, to help in dealing with the crisis. As the cybersecurity emergency response team from Delta Force, it is your job to come up with a plan of action. Over a period of three days, you will be expected to:
1. Contain and investigate the nature of the attack: • What is the name of this ransomware? • Are there any means of circumventing the ransomware? • Would you advise the hospital to pay the ransom? • What does USB Rubber Ducky do, and how does it affect your
cybersecurity strategy? • Do you believe Dave? What action would you take against Dave? • Do you intend to press charges against Adam?
2. Return the hospital to full working order; 3. Propose and outline a cybersecurity framework to protect the hospital from
future attacks: • You may choose a standard cybersecurity framework (i.e. NIST) and
adapt it to the context of this case. 4. Propose and outline a series of penetration tests.
Your report will provide a time-line narrative of what you did to contain and investigate the attack, the steps taken to return the hospital to full working order, as well as the steps required to implement a cybersecurity framework within the hospital (i.e., what needs to be done first, second, etc., etc.). The penetration tests you propose should demonstrate how the framework would have prevented the original ransomware attack.
• Due: Sunday Nov 3rd, 11:30 p.m. • Maximum of five pages • Font: Calibri, Font Size: 11, Line Space: 1.0 • APA Citation Format
CSEC 340