Learning Objectives

Research the Heartbleed vulnerability, exploit, business risk, business impact, and possible defensive controls to counter the attack. Discuss how Heartbleed became a very public security event in 2014. Provide at least two cited references that support your conclusion.

Assignment Requirements

Research the Heartbleed attack including the vulnerability information and CVSS rating. Include the mechanics of an attack using the OpenSSL vulnerability, exploit and impact to the business. Show business risk that companies evaluated and what defensive controls were put in place to protect the business against the attack. Finally, provide examples of business impact to real companies affected by the attack.

Include the following sections in your Report:

Introduction

Vulnerability

Exploit

Business Risk Business Impact

Defensive Controls

Conclusion

The report must be professional in format with an introduction, each finding, conclusion and references.