Question

Imagine you work for Popcorn, which is a file-sharing program that uses bit-torrents. (a) Explain the following security policy in terms of CIA : "Users can sign in Popcom platform anonymously. All movies on Popcom have to be original. (b) Explain which mechanisms will implement in order to enforce the policy in part (a).

Answer 1

a) Explain the following security policy in terms of CIA : "Users can sign in Popcom platform anonymously. All movies on Popcom have to be original.

Answer:

•      According to the CIA policy of a company which is about three elements. Those three elements are Confidentiality, Integrity and Availability. The Popcorn time has been well enough to fullfill these criterias.
• The anonymous user sign in is a feature that supports the confidentiality criteria, which does a job of creating a confidential database or allowing users to use the movie streaming service without sign ups as well.
• Using a two way authentication can also make the app more secure.
• All movies have to be original , well in this case to provide the users with original content, we'll have to either buy license from the companies to use the movies or else we'll be kind of stealing the movies ( which we are doing ) .
• If the above gets true, we'll have to charge the users some subscription.

------------------------------------------------------------------------------------------------------------------------------------------------------

(b) Explain which mechanisms will implement in order to enforce the policy in part (a).

Answer:

• To enforce the policies mentioned in (a), the first one is the confidentiality ( keeping user sign in anonymous), As a part of confidentiality of user data, all data must be encrypted well and stored , mostly hashing it will do.
• Again, using a OTP based login would be just fine. As no other person would get to get using your account.
• Also using VPN servers would be a plus point for popcorn time to keep the traffic more anonymous and difficult to trace.
• All of this above mentioned points would be just fine inorder to protect the identity and confidentiality of the users.

----------------------------------------------------------------------------------------------------------------------------------------------------------------

Thanks for asking. ;)