sunburst bakeries case study answers

Pardon Our Interruption

As you were browsing something about your browser made us think you were a bot. There are a few reasons this might happen:

• You've disabled JavaScript in your web browser.
• You're a power user moving through this website with super-human speed.
• You've disabled cookies in your web browser.
• A third-party browser plugin, such as Ghostery or NoScript, is preventing JavaScript from running. Additional information is available in this support article .

To regain access, please make sure that cookies and JavaScript are enabled before reloading the page.

We store cookies data for a seamless user experience. To know more check the Privacy Policy

• computer-science
• engineering
• science-math
• Online Tutoring
• AI Essay Writer

• Strategic Management
• SUNBURST BAKERIES Sunburst Bakeries is a supplier...

SUNBURST BAKERIES Sunburst Bakeries is a supplier of all kinds of bread and cakes to leading... 1 answer below »

127+ Users Viewed

19+ Downloaded Solutions

California, US Mostly Asked From

SUNBURST BAKERIES

Sunburst Bakeries is a supplier of all kinds of bread and cakes to leading supermarkets. It has a huge factory that makes the entire range of products – no finished items are bought in from other bakers. Production facilities are split into three main areas. Different production methods are used in these three areas. The demand patterns for three of the best-known Sunburst products are very different. Standard loaves are bought by supermarkets every day, all year round. There is some variation in demand through the seasons – but very little. Large, family-sized cakes are mainly bought at weekends – whereas doughnuts are most often bought midweek for children’s lunch boxes. Finally, the business is famous for its handmade wedding cakes, each one to a different design. There have been rumours among the workers that one section of the factory that uses batch production might be converted into flow-line production.

20 marks, 40 minutes

1. Define the term ‘batch production’. [2]

2. Explain the type of production method Sunburst would use to produce wedding cakes. [4]

3. Analyse two factors that affect the type of production method Sunburst chooses for different types of product. [4]

4. Evaluate Sunburst’s decision to switch from batch to flow production in one section of its factory. [10]

0 answers so far

Solution Preview:

Do you need an answer to a question different from the above ask your question, help us make our solutions better.

Rate this solution on a scale of 1-5 star

Thank you for your feedback.

Related questions, none kindly solve the following question i will be very thankfull to help me mehta bakers....

INTRODUCTION Cost of materials used in producing a good or performing a service is known as material cost. All indirect materials required in the production process, such as household cleaners, are not included in the cost of materials. The terms preset cost, anticipated...

SUNBURST BAKERIES Sunburst Bakeries is a supplier of all kinds of bread and cakes to leading supermarkets. It has a huge factory that makes the entire range of products – no finished items are bought in from other bakers. Production facilities are...

Sunburst bakery is a supplier of all kinds of bread and cakes to leading supermarkets in port elizabeth and surroundings. it has a huge factory that makes the entire range of products – no finished items are bought in from other bakers. production..., sunburst bakeries is a supplier of all kinds of bread and cakes to leading supermarkets. it has a huge ñctory that makes the entire range of products- no finished items are bought in from other bakers. production facilities are split into three main..., using a cookery book, choose three similar, fairly complex, recipe items such as layered and decorated gateaux (cakes) or desserts. for each, construct the indented bill of materials and identify all the different materials,  sub-assemblies and..., using a cookery book, choose three similar, fairly complex, recipe items such as layered and decorated gateaux (cakes) or desserts. for each, construct the indented bill of materials and identify all the different materials, sub-assemblies and final..., recent questions in strategic management, specifically, carry out a pestel analysis and identify key drivers for change for an organisation of your choice. for the same organisation, construct four scenarios for the evolution of its environment. what implications are there for the..., introduction for this assessment task, you will be given a business scenario. based on this business scenario, you will lead and participate in a series of meetings and presentations. you will need to refer to the following documentation throughout..., part iii: work out (4 pts) a. assume in gage college there are 600 mgt students. from these 300 students are first year, 200 students are second fear and 100 students are third year (assume there is heterogeneity between each section and homogeneity..., 5 pager concept reflecting on;how a cluster partnership can be developed (how); national policy relevance and buy in (why); and overall development goals and objectives, and possible partnership models (impact)., one risk associated with a joint venture is that multiple choice in a joint venture, one firm owns 100 percent of the stock. a firm that enters into a joint venture risks giving control of its technology to its partner. a joint venture reduces the..., hypothetical venture: “smart sustainability hub” why the motivation for this project is to address the growing need for sustainable solutions in urban environments. by creating a “smart sustainability hub,” it aims to enhance quality of life, reduce..., bus5ap – business application of analytics question 03: “analyse this” – bring your user stories to life with power bi question type: individual marks: 40% release date: 22-may-2024 due date: 21-jun-2024 at 23:55 (aedt) – submission link on lms..., required to prepare a 3-5 page executive briefing report for strategy according to the information from the business strategy game - website (https://www.bsg-online.com/users/lobby/)., (20 points) what effect would the following have on the market for organically grownwheatdraw a diagram to illustrate your answer in each case.a) a reduction in the cost of organic fertilizers. (4 points)b) a reduction in the cost of nitrogen..., plagiarism checker.

Submit your documents and get free Plagiarism report

Stuck with a Question?

Your solution is just a click away! Get it Now

Couldn't Find What You Were Looking For ?

Get it solved from our top experts within 48hrs!

Good News! We have found the answer to this question!

SUNBURST: A Vital Case Study of Supply Chain Attack

Satyam Dubey

December 28, 2020

About SolarWinds:

SolarWinds is an American company that provides IT management and administration software that can be used by the Sysadmins and IT administrators in their organization. The reach of the SolarWinds Products is quite high and their products are used by many fortune-500 companies, spreading across the globe.

What is Supply Chain Attack:

Supply Chain Attack is a type of attack in which adversaries can modify the product provided by third-party associates in various ways to compromise multiple targets. The below image provides a visualization of the definition of the supply chain attack.

SoloriGate/Sunburst: SolarWinds Supply Chain Attack 

SolarWinds supply chain attack first came into the radar of the information security communities when Fireeye was found affected by this supply chain attack. Fireeye was very open & transparent about getting breached in this supply chain attack. Fireeye has been tracking the threat actors behind this global intrusion campaign as UNC2452. There was not much damage done to the organization as only their Red Assessment Tools were leaked in the whole scenario. Fireeye Reported that the tools which were stolen by the attackers did not contain zero-day exploits. Many other big organizations like Microsoft, VMware as well as US Government agencies like the US Department of State, Department of Homeland Security, and many more were found breached by this supply chain attack.

Technical Analysis of the SoloriGate Attack:

SolarWinds was reportedly breached first and the reason was most likely the weak password they were using for one of their access/update servers. The threat actors involved in this global intrusion campaign targeted multiple victims using infected SolarWinds Orion IT management & monitoring software updates. Note that most of the analysis that has been demonstrated in this blog is based on Microsoft's and Fireeye’s Blog.

Note that most of the analysis that has been demonstrated in this blog is based on Microsoft's and Fireeye’s Blog.

The infectious update was delivered as a Microsoft standard Windows Installer Patch file (SolarWinds-Core-v2019.4.5220-Hotfix5) which included the malicious DLL (Dynamic Link Library) named as SolarWinds.Orion.Core.BusinessLayer.dll which acts like a backdoor on the Attack Surface. The infected SolarWinds Orion IT management & monitoring software update and DLL was digitally signed and due to which it was highly evasive on the attack surface.

Figure: Digital Signature Details of SolarWinds.Orion.Core.BusinessLayer.dll

In order to know the internal working of the Sunburst/SolariGate Malware let’s decompile the malicious SolarWinds.Orion.Core.BusinessLayer.dll . The Malware samples related to the Sunburst attack can be found here .

In order to analyze the dll, open the file named under the directory APT_Backdoor_SUNBURST “32519b85c0b422e4656de6e6c41878e95fd95026267daab4215ee59c107d6c77” (Which is basically named after the SHA256 hash of the SolarWinds.Orion.Core.BusinessLayer.dll) in the dnSpy. The infected code was found under the namespace “SolarWinds.Orion.Core.BusinessLayer.BackgroundInventory” and more specifically in the “InventoryManager” class. 

Image: Decompilation of Malicious DLL.(Identifying the BackgroundInventory Namespace)

Image: Decompilation of Malicious DLL (Going through the InventoryManager Class under the Namespace)

Now this class has a “RefershInternal()” method that creates a new thread which calls the Malicious OrionImprovementBusinessLayer class where all the backdoor magic happens.

Image: Analyzing the RefreshInternal Method

The image below sums up the flow of the infected SolarWinds.Orion.BusinessLayer.dll .

To be more evasive on the attack surface the malware code in the DLL runs various checks to make sure that it is not being analyzed using some programs. That is why, hash of the processes, services and drivers on windows is calculated and checked with the blacklisted hashes of the same, and if none of the blacklisted hashes are found on the system then only backdoor code gets activated.

Adversaries in this case used DGA (Domain Generation Algorithms) to dynamically build and resolve the subdomain of avsvmcloud.com. The C2 domain consist of two static and two variable parts which is illustrated in the image below.

Image Source: Microsoft

After the malware has made a successful connection to the C2 server the SoloriGate malware performs the primitive lateral movement, credential abuse, and privilege escalation techniques for further infrastructure exploration. 

The image below from Microsoft illustrates the whole process of SoloriGate Malware infection.

According to Microsoft the threat actors are targeting to steal the SAML token signing certificates, using which attackers can easily forge the SAML tokens and access the resources. 

Here is the elaborated descriptive blog post about the SolariGate identity IOC’s.

Defense against SUNBURST/SoloriGate:

• Fireeye Team uploaded a List of IOC’s and signatures which can be used by organizations for identifying the backdoor.  The GitHub repository of Fireeye countermeasures can be found here .
• It is also recommended by SolarWinds to go through this advisory page and also upgrade their Orion platform to Orion Platform release 2020.2.1 HF 1.
• MITRE ATT&CK Techniques related to SolariGate/SUNBURST:

Conclusion:

This SolarWinds Supply Chain Attack is surely raising the eyebrows of people in the IT industry and also outside the IT industry. Right from STUXNET to NotPetya we have seen many supply chain attacks that were found devastating. In 2017-18 NotPetya was found to have cost  10 Billion Dollars in damages. The evasive Behaviour of the attack made it so hard to be identified in the wild.  Currently, SolarWinds Orion Platform is used by 300,000 customers and out of which 18,000 have downloaded the malicious update.

I hope this blog provided you with a better view of the SoloriGate and SUNBURST attack.

References:

https://www.microsoft.com/security/blog/2020/12/18/analyzing-solorigate-the-compromised-dll-file-that-started-a-sophisticated-cyberattack-and-how-microsoft-defender-helps-protect/

https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html

https://techcommunity.microsoft.com/t5/azure-active-directory-identity/understanding-quot-solorigate-quot-s-identity-iocs-for-identity/bc-p/2009890#M3044

Recent Blogs

PureID + ColorTokens – Stronger Zero Trust Offering for Customers

Nikhil Bhansi

September 11, 2024

Critical Vulnerabilities in SolarWinds Web Help Desk and the Essential Hotfixes

Srishti Chaubey

September 9, 2024

Microsoft Entra ID Vulnerabilities: Pass-Through Authentication Risks

August 23, 2024

Connect with Us!

Subscribe to receive new blog post from PureID in your mail box

© 2024 | PureID. All Rights Reserved