Reference no: EM132401416

Case Study: Designing a Secure Encryption Framework

You work for a military organization that is developing a new system to store highly sensitive data - like the PII (personally identifiable information) of military personnel. The system will have an application front-end (written in the Microsoft .NET framework) and a database at the back-end (like Microsoft SQL Server). The system should be accessible to military personnel over the Internet. In light of recent attacks on such systems, your task is to design the complete encryption framework to protect this data. Refer to the following resource to read about some of the recent attacks.

Please prepare a brief paper that addresses at a minimum the following key questions:
• What personnel records must be encrypted?
o What encryption algorithm would you recommend and why?
o Will you use symmetric key encryption or asymmetric key encryption and why?
o What would be the key length and why?
• Whichever encryption algorithm you recommend, it will use keys. How will you secure these keys?
o Will you encrypt the keys? If yes, then how will you secure the key-encrypting-keys?
o Will you restrict access to the keys? Please describe the mechanisms for this.
o Where and how will the keys be stored? How will you restrict access?
o Describe any other mechanisms you will adopt to secure the encryption keys
• Imagine a scenario in which the computer system of the person who has access to the encryption keys gets compromised. Identify additional security mechanisms to protect your data in such a scenario.
• What if the person with access to the keys goes rogue? Can your design prevent compromise of the sensitive data in such a scenario?
• What encryption techniques will secure the information when it is accessed over the Internet (data in transit)?
• List and describe briefly the policy and process-related controls included in the above encryption framework.

Use the American Psychological Association (APA) style (6th edition) to write your assignment. The length of your assignment should be 3 to 5 pages, and you should include at least three quality references.