Eliminated cost effectively by new crypto architecture

Assignment Help Basic Computer Science

Reference no: EM132770006

Crypto Security Architecture Exercise

Scenario

You work for the Apex Trucking Company. This is a firm that moves materials for clients all over North America and Europe. The leadership of the company has no real knowledge of technology, but wants to use encryption to protect the information the company has. The information to be protected consists of future marketing plans for the company, financial data, employee records, customer records, and customer shipping date.

The company wants the capability to securely allow customers to track their orders in real time from their origin to their destination on-line over the Internet. The information that is to be supplied to customers is tracking number, location of shipment, size of shipment, value of shipment, and estimated time of arrival as well as the customer contact information for this shipment.

While this information can be made available from a central server, the marketing groups in Europe, Mexico and Canada need management access to the data to enter new shipments and change orders before they ship.

The company currently is using desktops running Windows XP and Windows based servers. There are only passwords used for security, and a firewall, but no encryption to protect the information.

The project is to provide the above capability securely using encryption, as well as providing additional security to the company via encryption. You will need to address new technology, the reasons and costs behind your choices, and what policy and legal implications there are to your encryption solution.

There is at least one marketing group in Mexico, Germany, and Canada, as well as three in the US. The company is based in New York. It is important that customers can rely on the shipping data being accurate, and from the company.

You're assigned this crypto architecture project.

Configuration

The current configuration has one server acting as a firewall and web server. This server is directly attached to the Internet.

There is a database server behind the firewall, as well as a separate server for HR and marketing. The marketing server needs to be securely accessed by the marketing teams. They also need to access the database server through an Internet connection to manage data and display reports.

All databases use MySQL and are currently not secured.

Constraints

Your tasking is crypto architecture. The normal replacement of computers is done on a rotating schedule. It is outside the scope of your project to plan for the replacement of computers. Your architecture should work with the computers you have. You may consider the replacement of equipment if an upgrade or new equipment would be critical to the crypto architecture.

Specific Tasking

You have been specifically tasked to do the following things and develop a complete and sound crypto architecture. Remember, the president is very knowledgeable about cryptography and wants lots of details about how you are going to implement the encryption.

Describe in detail what new cryptographic systems you are going to propose, how they work, and how they will enhance security. Be specific about these systems weaknesses and how you plan to compensate for the weaknesses.

Describe and explain the impact the new cryptographic security architecture will have on the current security features and how this impact will be mitigated.

What new issues will arise as a result of implementing the new cryptographic solutions and what are the arguments on either side of these issues?

Show a clear and detailed understanding of the existing encryption being used such as passwords, and operating encryption features not being used and whether you plan to use these or not, and if not why not.

How well will all these new cryptographic features work together? Identify any areas of concern, and how you propose to resolve conflicts and issues.

What if any current security features can be eliminated cost effectively by the new crypto architecture?

Reference no: EM132770006

Questions Cloud

Information risk planning and management : one of the eight Information Risk Planning and Management step is to develop metrics and measure results. Why are metrics required?

Make recommendations to the board of directors : You are required to evaluate the above two acquisition options and make recommendations to the board of Directors of Four Seasons Sydney Company Ltd

Describe and explain the purpose of the internal controls : Describe and explain the purpose of the internal controls you might expect to see in the sales system at Nice Flowers over the Receipt

How do best practices contribute to quality and safety : How do best practices contribute to quality and safety? How can the commitment to quality improvement be integrated throughout all roles and at all levels.

Eliminated cost effectively by new crypto architecture : What if any current security features can be eliminated cost effectively by the new crypto architecture?

Compute the ending inventory balance on october : During the month of October, Williams sold 250 units. Compute the ending inventory balance on October 31 using: Average-cost

Which is true for a project with an internal rate of return : If a project is normal, which of the following is true for a project with an internal rate of return exceeding the required rate of return?

What does this mean for a business - tobacco company : What does this mean for a business - Tobacco company - Select some stake holders and plot them on model & put them in each model

Find which is not true about doctrine of marshaling assets : When a partner is personally insolvent and has debit capital balance in the partnership, the partner's personal assets should be distributed

User Account

All Pages