Reference no: EM132667837

CSI3207 Network Security Fundamentals - Edith Cowan University

Case Study

Before you read the assignment instructions, please complete the following:

1. Watch the 4 x academic integrity videos from the Associate Dean Teaching and Learning (ADTL), School of Science.
(Available under Assessment> Assignments> Academic Integrity - IMPORTANT).

2. Read the information and watch the video related to Turnitin.

3. Review the exemplars provided, which should enable you to understand better how response could be structured. Note: you cannot use any of the content from the exemplar(s). Your submission should be your own incorporating your own perspective and creative aspect. Copying content and ideas from the exemplar(s) would be considered academic misconduct and would lead to a serious penalty.

4. Read and ensure you understand the rubrics available under ‘My Grades' on Blackboard
(available under Assessment > Assignments> Assessment 3: Case Study> Marking Rubric).

Assignment Overview:
This assessment requires you to implement network security countermeasures to securely deploy a Honeypot into a network environment based on the design and requirements provided. You are required to submit your work in the form of report capturing the evidence of your own work and a brief presentation (video recording) demonstrating the implementation.

Scenario/Situation:
For the purpose of this assessment, consider that the following network design is for a Small-Medium Business organisation with limited resources allocated for network security. The network design only illustrates the part that you are required to focus and forms the scope of the assessment. The rest of the Internal Network consists of servers and LAN computers that are used for internal purposes only.

You are required to deploy two virtual machines (VMs) as shown in the diagram below: one serving as a firewall and the other serving as a Honeypot. The firewall VM also integrates intrusion detection capabilities, therefore, in addition to filtering network traffic, it should alert any potential intrusion attempts.

Tasks:

1. Create two virtual machines to be used as the Firewall VM (i.e. firewall + IDS) and Honeypot VM. You may use VMWare or VirtualBox for this task. If you intend to use something else, please contact the lecturer first for approval. The guest operating system for each VM should be Ubuntu Desktop 18.04.4 LTS.

2. Choose a Honeypot you intend to deploy in the network. Provide a justification of why you have made this choice. You should specify any assumptions made to support your answer.

3. On the Honeypot VM: install and configure the Honeypot you have chosen in Step 2.

4. On the Firewall VM: Configure the firewall using iptables (not ufw), to ensure security of the internal network and also to enable functionality of the Honeypot securely.

5. On the Firewall VM: install and configure snort to function as an IDS for the network. You should configure beyond the default rules to ensure it is useful for the purpose of activities you are performing in Steps 3 and 4.

6. Demonstrate the overall tasks/solutions briefly and one aspect of your implementation that you found challenging/interesting by recording a short video with narration using your own voice. The video recording should not exceed 3 minutes. No content beyond 3 minutes will be marked. Your demonstration must be related to the firewall, IDS, and/or the Honeypot. In the video, you must explain what you are demonstrating and why this is challenging/interesting. You must also demonstrate the functionality and how you implemented the feature related to the functionality. The video recording should be recorded using Panopto and submitted separately from this report. Please refer to (Assessment > Assignments> Assessment 3: Case Study> Video Presentation) for further information.

Attachment:- Network Security Fundamentals.rar