tag:blogger.com,1999:blog-53431100114230239342011-04-22T08:54:52.419+08:00Ardan Sorteknoreply@blogger.comBlogger101100tag:blogger.com,1999:blog-5343110011423023934.post-74131949309707843102008-08-11T19:22:00.005+08:002008-08-18T21:55:08.847+08:00* means important<br />* trapdoor = Lines of code in programming module alloing user to access to system as he type in secret code. A secret undocumented entry point into the programming module hidden amoung lines of code<br />* backdoor requires software programs like RAT to access<br /><br /><strong><em><span style="font-size:130%;"></span></em></strong><br /><br /><span style="font-size:130%;"><strong><em>ASEC</em></strong></span><br /><br />*Countermeasures and specific exploits as well<br /><br />introduction<br /><br />various scanning tools (Not very IMPT)<br /><br />passwords/access control<br /><br />default/weak passwords<br /><br />permissions<br /><br />scripts and dll<br /><br />malicious scripts<br /><br />dll loading paths<br /><br />buffer overflow<br /><br />heap overflow<br /><br />stack overflow<br /><br />effects of exploits<br /><br />propietary format and protocols<br /><br />security thru obscurity not good<br /><br />format string exploits<br /><br />how is it conducted<br /><br />effects of the exploits<br /><br />integer overflow<br /><br />how does it happen<br /><br />preventive measures<br /><br />SQL injection<br /><br />conducting exploit<br /><br />using meta data<br /><br />protect database credentials<br /><br />web vulnerabilties<br /><br />error messages<br /><br />forceful browsing<br /><br />XSS<br /><br />data tampering<br /><br />http session form data cookies<br /><br />information disclosure<br /><br />passwords stored in text file<br /><br />passwords stored in memory<br />section b<br /><br />format string<br /><br />dll<br /><br />integer overflow<br /><br />sql injection<br /><br />web vulnerabilities<br /><br />information disclosures<br /><br /><br /><br /><span style="font-size:180%;"><strong><em>ISPA</em></strong></span><br /><br />* all from Lai FM<br /><br /><br /><br />Exam format:<br /><br />10 MCQ (20 marks)<br /><br />5 Structured (80 marks)<br /><br />2 hours<br /><br /><br /><br />General tips:<br /><br />Audit point of view***<br /><br />Tutotial**<br /><br />ACL no commands, just MCQ<br /><br />Few questions from MST chapters, just MCQ<br /><br />No Cobit<br /><br />Security polices, just MCQ<br /><br />Use liberal amounts of common sense<br /><br />Mainly look at the auditors' viewpoint, controls, and how an auditor sees things.<br /><br />Can give logical answers as he may give marks for answers not found in the book, but are relavant to the answer.<br /><br />May require drawing of diagrams to aid description questions.<br /><br /><br /><br />Topic 4 Computer operations:<br /><br /><br />focus on this chapter, case study coming out for this<br /><br />Page 40 onwards, page 43, 44, 45<br /><br />segregation of duties*<br /><br />Page 47<br /><br />distributed model not important<br /><br />Page 54<br /><br />computer centre operation<br /><br />physical security<br /><br />Page 57-64<br /><br />disaster recovery<br /><br />Page 65 onwards<br /><br />Page 71-75<br /><br />email risks<br /><br />Page 77<br /><br />PC systems not important<br /><br /><br /><br />Topic 5 Data management***<br /><br /><br /><br />Page 93, 94, 95<br /><br />Flatfile approach vs database<br /><br />page 97 -106<br /><br />advantages, disadvantages and features<br /><br />Page 107<br /><br />3 DBMS models in MCQ<br /><br />114<br /><br />database distributed environment important***<br /><br />116<br /><br />replicated and partitioned distributed database important***<br /><br />118<br /><br />concurrency<br /><br />120<br /><br />access control<br /><br />125<br /><br />backup control***<br /><br /><br /><br />Topic 6 SDLC<br /><br /><br />Product of SDLC + diagram page 141<br /><br />Relate to POSB example, live system, maintainence system<br /><br />136 onwards, 139<br /><br />types of commercial systems in MCQ<br /><br />142-165/end of topic<br /><br />Auditor's role in SDLC<br /><br />phase 7/implementation phase in MCQ<br /><br />172 to end important***<br /><br />controlling and auditing SDLC important***<br /><br />controlling new systems<br /><br />controlling maintenance***<br /><br /><br /><br />Topic 7 network, internet, e commerce ***<br /><br /><br /><br />audit point of view<br />227 onwards important<br /><br />227-228<br /><br />controlling e commerce<br /><br />237<br /><br />audit objectives<br /><br />239<br /><br /><br /><br />Topic 8<br /><br /><br />Input control, black and white box models, 5 CAATTS impt!<br /><br />input controls important ***<br /><br />processing and output controls in MCQ<br /><br />320<br /><br />testing application control ***<br /><br />323<br /><br />parallel simulation ITF and such in MCQ<br /><br /><br /><br />If unsure clarify with me<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/5343110011423023934-7413194930970784310?l=dism0106.blogspot.com' alt='' /></div>Ardan Sorteknoreply@blogger.com0tag:blogger.com,1999:blog-5343110011423023934.post-85047798612682386642008-06-03T09:24:00.003+08:002008-06-03T22:08:54.870+08:00There will be a class outing to Sentosa, although what we are going to do is highly uncertain.<br /><br />Day/Date : Thursday 5th June 2008AD<br />Activity : Uncertain<br />Location : Sentosa Island<br />Meet at : Harbourfront MRT Station.<br />Meeting time: 11.00am*<br />Persons : Ben, Jeremy, CR, Suz, Ous, Jono, Bastien. More Pending<br />Items needed : Sentosa is expensive, as such, bring as much money as you think will be necessary. Clothes, water and towels are also not a bad idea<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/5343110011423023934-8504779861268238664?l=dism0106.blogspot.com' alt='' /></div>Ardan Sorteknoreply@blogger.com0tag:blogger.com,1999:blog-5343110011423023934.post-86599769737248457052008-05-30T20:37:00.010+08:002008-05-30T21:31:42.581+08:00These are the photos, if anyone still remembers, from our last class/PT outing. I know that I promised to put them out earlier, so sorry for the delay.<br /><br /><a href="http://4.bp.blogspot.com/_I-yqNXGUEPo/SD_2WNfmZxI/AAAAAAAAABk/Vt0JCy1Rn4I/s1600-h/DSC_0003.JPG"><img id="BLOGGER_PHOTO_ID_5206150555703338770" style="CURSOR: hand" alt="" src="http://4.bp.blogspot.com/_I-yqNXGUEPo/SD_2WNfmZxI/AAAAAAAAABk/Vt0JCy1Rn4I/s400/DSC_0003.JPG" border="0" /></a><br />Mr Lai bowling.<br /><br /><a href="http://2.bp.blogspot.com/_I-yqNXGUEPo/SD_3RtfmZyI/AAAAAAAAABs/ywJjJ20Pzok/s1600-h/DSC_0006.JPG"><img id="BLOGGER_PHOTO_ID_5206151577905555234" style="CURSOR: hand" alt="" src="http://2.bp.blogspot.com/_I-yqNXGUEPo/SD_3RtfmZyI/AAAAAAAAABs/ywJjJ20Pzok/s400/DSC_0006.JPG" border="0" /></a><br />From the right, LFM, Ous, Kege and WJ, Paul, Ben, Sean, Jono, YS and Jem, CR<br /><br /><a href="http://4.bp.blogspot.com/_I-yqNXGUEPo/SD_5uNfmZzI/AAAAAAAAAB0/9bnHV3tVbnw/s1600-h/DSC_0009.JPG"><img id="BLOGGER_PHOTO_ID_5206154266555082546" style="CURSOR: hand" alt="" src="http://4.bp.blogspot.com/_I-yqNXGUEPo/SD_5uNfmZzI/AAAAAAAAAB0/9bnHV3tVbnw/s400/DSC_0009.JPG" border="0" /></a><br />Fabz going for the kill.<br /><br /><a href="http://3.bp.blogspot.com/_I-yqNXGUEPo/SD_6P9fmZ0I/AAAAAAAAAB8/lwPzkNHjEZI/s1600-h/DSC_0010.JPG"><img id="BLOGGER_PHOTO_ID_5206154846375667522" style="CURSOR: hand" alt="" src="http://3.bp.blogspot.com/_I-yqNXGUEPo/SD_6P9fmZ0I/AAAAAAAAAB8/lwPzkNHjEZI/s400/DSC_0010.JPG" border="0" /></a><br />Ous being Ous.<br /><br /><a href="http://4.bp.blogspot.com/_I-yqNXGUEPo/SD_-iNfmZ6I/AAAAAAAAACs/0DPEY1RmKb4/s1600-h/DSC_0023.JPG"><img id="BLOGGER_PHOTO_ID_5206159557954791330" style="CURSOR: hand" alt="" src="http://4.bp.blogspot.com/_I-yqNXGUEPo/SD_-iNfmZ6I/AAAAAAAAACs/0DPEY1RmKb4/s400/DSC_0023.JPG" border="0" /></a><br />Jono in a moment of ecstasy.<br /><br /><a href="http://3.bp.blogspot.com/_I-yqNXGUEPo/SD_9p9fmZ1I/AAAAAAAAACE/FPPdQz1LLtw/s1600-h/DSC_0038.JPG"><img id="BLOGGER_PHOTO_ID_5206158591587149650" style="CURSOR: hand" alt="" src="http://3.bp.blogspot.com/_I-yqNXGUEPo/SD_9p9fmZ1I/AAAAAAAAACE/FPPdQz1LLtw/s400/DSC_0038.JPG" border="0" /></a><br />Ben, Paul, Fabz.<br /><br /><a href="http://4.bp.blogspot.com/_I-yqNXGUEPo/SD_9qNfmZ2I/AAAAAAAAACM/LaNMrDDxzmM/s1600-h/DSC_0027.JPG"><img id="BLOGGER_PHOTO_ID_5206158595882116962" style="CURSOR: hand" alt="" src="http://4.bp.blogspot.com/_I-yqNXGUEPo/SD_9qNfmZ2I/AAAAAAAAACM/LaNMrDDxzmM/s400/DSC_0027.JPG" border="0" /></a><br />Sean summoning a magical ball of green energy.<br /><br /><a href="http://3.bp.blogspot.com/_I-yqNXGUEPo/SD_9q9fmZ3I/AAAAAAAAACU/RjYPtM4KRkg/s1600-h/DSC_0012.JPG"><img id="BLOGGER_PHOTO_ID_5206158608767018866" style="CURSOR: hand" alt="" src="http://3.bp.blogspot.com/_I-yqNXGUEPo/SD_9q9fmZ3I/AAAAAAAAACU/RjYPtM4KRkg/s400/DSC_0012.JPG" border="0" /></a><br />Enjoying ourselves.<br /><br /><a href="http://4.bp.blogspot.com/_I-yqNXGUEPo/SD_9rNfmZ4I/AAAAAAAAACc/mzeGlpjeBBA/s1600-h/DSC_0036.JPG"><img id="BLOGGER_PHOTO_ID_5206158613061986178" style="CURSOR: hand" alt="" src="http://4.bp.blogspot.com/_I-yqNXGUEPo/SD_9rNfmZ4I/AAAAAAAAACc/mzeGlpjeBBA/s400/DSC_0036.JPG" border="0" /></a><br />YS strategizing.<br /><br /><a href="http://1.bp.blogspot.com/_I-yqNXGUEPo/SD_9rdfmZ5I/AAAAAAAAACk/_6So_w1nNLU/s1600-h/DSC_0032.JPG"><img id="BLOGGER_PHOTO_ID_5206158617356953490" style="CURSOR: hand" alt="" src="http://1.bp.blogspot.com/_I-yqNXGUEPo/SD_9rdfmZ5I/AAAAAAAAACk/_6So_w1nNLU/s400/DSC_0032.JPG" border="0" /></a><br />Jem, YS and CR.<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/5343110011423023934-8659976973724845705?l=dism0106.blogspot.com' alt='' /></div>Ardan Sorteknoreply@blogger.com0tag:blogger.com,1999:blog-5343110011423023934.post-55254087154992629692008-05-30T20:24:00.002+08:002008-05-30T20:29:39.701+08:00Just a brief entry to show and alert DISM classmates about the blog being revived.<br /><br />Sorry for the long hiatus. Announcements of a class outing and a myriad of other stuff to follow.<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/5343110011423023934-5525408715499262969?l=dism0106.blogspot.com' alt='' /></div>Ardan Sorteknoreply@blogger.com0tag:blogger.com,1999:blog-5343110011423023934.post-47659842293095799002008-01-31T23:10:00.000+08:002008-02-02T15:50:18.762+08:00This is the finalised plan for the class outing.<br /><br />Day/Date : Monday 4th February 2008AD<br />Activity : Bowling/Dinner<br />Location : Marina South, near City Hall MRT.<br />Meet at : City Hall MRT Station.<br />Meeting time: 3.00pm*<br />Persons : Kay, Fabian, CR, Ben, Jeremy, Sean, Paul, Wei Jian, Jonathan, Louis, YS, Elbon, Bastien and Sian Wee. More pending.<br />Cash needed : Please bring some money for activities. Around $10++<br /><br />Could someone bring a camera? We need some new, updated class photos.<br /><br />*Mr Lai arriving at around 4++pm.We will be beginning activities early however.<br /><br />Also, Fabian, CR, Jeremy, Ben and Ys will be going early, anyone wanting to join them, ask them for further details.<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/5343110011423023934-4765984229309579900?l=dism0106.blogspot.com' alt='' /></div>Ardan Sorteknoreply@blogger.com1tag:blogger.com,1999:blog-5343110011423023934.post-42474953770654355812008-01-31T23:07:00.000+08:002008-01-31T23:09:54.207+08:00Things you need to do:<br /><br />Please come down to T10, Industry Services Centre to collect a booklet titled “Have a Good Trip!” issued by Ministry of Foreign Affairs, Singapore, before your departure.<br /><br />If you have not completed the Overseas ITP: Letter of Undertaking (IS-FRM-P05-110M), please download the form from E-Learning@SP. The completed form should be submitted to ISC before 11 February 2008.<br /><br />Please also refer to previous posts regarding the OITP again<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/5343110011423023934-4247495377065435581?l=dism0106.blogspot.com' alt='' /></div>Ardan Sorteknoreply@blogger.com0tag:blogger.com,1999:blog-5343110011423023934.post-25685311119069885302008-01-30T20:41:00.001+08:002008-01-30T21:05:06.861+08:00<div align="justify">Here is the gist of it.</div><div align="justify"> </div><div align="justify">Airport and related stuff:</div><div align="justify"> </div><div align="justify">Bring all relevant travel documents.</div><div align="justify"> </div><div align="justify">Ensure check in Luggage does not exceed 20kg</div><div align="justify"> </div><div align="justify">Get to T1, Changi Airport by 5.45am on 18th February 2008. If we all want to seat together in flight, please come as early as possible. I will generally recommend 5am. We get to choose our seating arrangement, which means you could be cleared way early or be left sitting next to some guy who likes to sniff your underwear.</div><div align="justify"> </div><div align="justify">No liquids are allowed to be brought on board.</div><div align="justify"> </div><div align="justify">Stick together as a group</div><div align="justify"> </div><div align="justify">Keep a close watch on your own luggage, and do not leave anything behind at any airport as we will not go back to retrieve any forgotten items</div><div align="justify"> </div><div align="justify">Wear warm clothing when in Singapore so as to limit skin exposure to blizzard conditions. Long pants and long sleeved shirt with a winter jacket as well as gloves and hats</div><div align="justify"> </div><div align="justify">Living in Changchun and related stuff:</div><div align="justify"> </div><div align="justify">After the experiences of the guinea pig batch, please bring more than $500. The lecturers recommend $800 to $1000 worth of renminbi.</div><div align="justify"> </div><div align="justify">Bottled Mineral water should be the preferred source of water intake.</div><div align="justify"> </div><div align="justify">Bring your own towel, shampoo and soap as it will not be provided by the hotel.</div><div align="justify"> </div><div align="justify">Ensure that the winter clothing you have or are planning to get be of subzero (below zero) standard as recent blizzards as well as the highest snowfall in 50 years means it will be a tepid 20 degrees celsius below zero (-20) when we arrive.</div><div align="justify"> </div><div align="justify">Get a flu jab, as well as any relevant injections.</div><div align="justify"> </div><div align="justify">Bring moisturisers and lip gloss/balm to ensure a non bleeding and cracked visage.</div><div align="justify"> </div><div align="justify">Bring an inhaler if you are asthmatic.</div><div align="justify"> </div><div align="justify">Our train will have beds, but should you be unable to sleep due to mind numbing cold or adrenaline, bring some non electrical entertainment along.</div><div align="justify"> </div><div align="justify">*If I missed out on anything please let me know*</div><div align="justify"> </div><div align="justify"> </div><div align="justify"> </div><div align="justify"> </div><div align="justify"> </div><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/5343110011423023934-2568531111906988530?l=dism0106.blogspot.com' alt='' /></div>Ardan Sorteknoreply@blogger.com0tag:blogger.com,1999:blog-5343110011423023934.post-44772045053677990012008-01-22T23:57:00.000+08:002008-01-23T00:10:35.914+08:00People* who will be going to Changchun, China for their OITP, please take note:<br /><br />Date/time: 30th Jan 2008, 9am<br />Location: T2134<br />Content: The StarWorld InfoTech staff will brief you on your travel itinerary on Wednesday, 30 Jan 2008 @ 9 am in T2134, please make yourself available on that day as you may also be issued with the air tickets.<br /><br />Also, direct flights to Beijing has been fully booked, as such, we will be taking flying Cathay Pacific to Hong Kong, where you will transit to take DragonAir to Beijing.<br /><br />Flight details are as follows:<br /><br />Flight No: CX710<br />Airline: Cathay Pacific<br />Destination: Hong Kong<br />Date of departure: 18th February<br />Time of departure: 8.05 am, please report 2 hours before departure<br />Time of arrival at destination: 11.55 am<br /><br />Flight No: KA992<br />Airline: Dragonair<br />Destination: Beijing<br />Date of departure: 18th February<br />Time of departure: 1.40pm HK time<br />Time of arrival at destination: 5pm<br /><br />Pending further information, our train will depart at 10.40 pm<br /><br />* Wei Jian, Fabz, Ous, Paul, YS, Jonathan, Bastien and Suz.<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/5343110011423023934-4477204505367799001?l=dism0106.blogspot.com' alt='' /></div>Ardan Sorteknoreply@blogger.com0tag:blogger.com,1999:blog-5343110011423023934.post-16139258328657519512008-01-22T23:27:00.000+08:002008-01-23T00:18:10.420+08:00As of now, we only have the class photos taken together with Annie Sung.If there are more, please do add them in.<br /><a href="http://3.bp.blogspot.com/_I-yqNXGUEPo/R5YL_lPQxxI/AAAAAAAAABc/qFk_zQNVxSM/s1600-h/Class+Photo2.gif"><img id="BLOGGER_PHOTO_ID_5158323610155271954" style="CURSOR: hand" alt="" src="http://3.bp.blogspot.com/_I-yqNXGUEPo/R5YL_lPQxxI/AAAAAAAAABc/qFk_zQNVxSM/s400/Class+Photo2.gif" border="0" /></a><br /><a href="http://1.bp.blogspot.com/_I-yqNXGUEPo/R5YLxFPQxwI/AAAAAAAAABU/cKAMvZsVXhE/s1600-h/Class+Photo1.gif"><img id="BLOGGER_PHOTO_ID_5158323361047168770" style="CURSOR: hand" alt="" src="http://1.bp.blogspot.com/_I-yqNXGUEPo/R5YLxFPQxwI/AAAAAAAAABU/cKAMvZsVXhE/s400/Class+Photo1.gif" border="0" /></a><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/5343110011423023934-1613925832865751951?l=dism0106.blogspot.com' alt='' /></div>Ardan Sorteknoreply@blogger.com0tag:blogger.com,1999:blog-5343110011423023934.post-27378831699810008352008-01-22T23:26:00.001+08:002008-01-22T23:26:55.365+08:00As you can see, the previous class blog has been euthanised and cleansed of all the pedophiles and other monstrosities.This is class blog 2.0, hopefully with a longer lifespan.<br /><br />Have a good day.<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/5343110011423023934-2737883169981000835?l=dism0106.blogspot.com' alt='' /></div>Ardan Sorteknoreply@blogger.com1