Eradication and recovery in Cybersecurity - Mini Project: Build & Apply

Understanding Eradication and Recovery in Cybersecurity

📖 Scenario: You are part of a cybersecurity team responding to a malware attack on a company's computer network. Your goal is to understand and apply the key steps of eradication and recovery to help restore the system safely.

🎯 Goal: Build a clear step-by-step outline that shows how to identify and remove malware (eradication) and then restore systems to normal operation (recovery).

📋 What You'll Learn

Create a list called infected_systems with exact system names

Create a variable called backup_available set to True

Write a loop using for system in infected_systems to simulate malware removal

Add a final step to confirm system restoration using system_status dictionary

💡 Why This Matters

🌍 Real World

This project models the practical steps cybersecurity teams take to remove threats and restore systems after an attack.

💼 Career

Understanding eradication and recovery is essential for roles like incident responders, security analysts, and IT administrators.

1

DATA SETUP: List infected systems

Create a list called infected_systems with these exact system names: 'Server1', 'Workstation3', and 'Laptop7'.

Cybersecurity

# Create the list infected_systems with the exact system names
# Your code here

Need a hint?

Use square brackets to create a list and include the system names as strings.

2

CONFIGURATION: Set backup availability

Create a variable called backup_available and set it to True to indicate that system backups exist.

Cybersecurity

infected_systems = ['Server1', 'Workstation3', 'Laptop7']
# Set backup_available to True
# Your code here

Need a hint?

Use a simple assignment statement to create the variable.

3

CORE LOGIC: Remove malware from infected systems

Write a for loop using for system in infected_systems that simulates malware removal by creating a dictionary called system_status where each system is set to 'cleaned'.

Cybersecurity

infected_systems = ['Server1', 'Workstation3', 'Laptop7']
backup_available = True
# Create system_status dictionary with cleaned status for each system
# Your code here

Need a hint?

Initialize an empty dictionary before the loop. Inside the loop, assign 'cleaned' to each system key.

4

COMPLETION: Confirm system restoration

Add a final step that updates system_status for each system to 'restored' if backup_available is True, simulating recovery completion.

Cybersecurity

infected_systems = ['Server1', 'Workstation3', 'Laptop7']
backup_available = True
system_status = {}
for system in infected_systems:
    system_status[system] = 'cleaned'
# Update system_status to 'restored' if backup_available is True
# Your code here

Need a hint?

Use an if statement to check backup_available, then a loop to update statuses.