Reference no: EM132383450

Assessment Description

Question 1: Hackers Causing Trouble

You have just started a job as a security analyst. You have been asked to compare and contrast the different types of attacks/vulnerabilities a hacker could use against your client's system.

The client's system:

• Is a virtualised environment, that uses the latest version of windows server as its base?

• Is forward facing (has access to the internet and must have this) and does not sit behind a proxy/web server.

• Is frequently attacked by automated and targeted hack attempts.

Questions:

• Compare and contrast attacks that could be used against windows server 2019

• What software-based mitigation techniques, could be used to help combat these attacks

• What add-ons could be attached to the network to help combat these vulnerabilities

Question 2: Cryptography

Your boss has also asked you to produce another report, where if you are responsible for safeguarding and protecting sensitive and personal information. what type of encryption should be used when storing and transferring sensitive client data.

In the context of the above scenario, you should produce a briefing report that

• Outlines the risks of handling this sort of sensitive data. This could refer to current laws/case law and processes that you should be aware of

• Explains how a security model, such as CIA/AAA, can infer trust in data handling

• Uses examples to compare and contrast symmetric encryption with asymmetric encryption

• Recommends and justifies an encryption algorithm for transferring client data over the internet and the storage of that data when it is not in use

Quality of Referencing

You are expected to thoroughly and accurately reference your report using the Harvard referencing style. The report should contain in-text Harvard references.

Marks will be deducted for

• Lack of referencing in the text

• Divergence from Harvard referencing style

Report Presentation and Layout

You are expected to compile a well-constructed, formal written report of no more than 2,000 words. Up to 10 marks are available for the presentation and layout of the report. The report should:

• Be a formal report, written in the third person

• Have all figures and tables correctly labelled and referenced

• Be presented in a structured and meaningful way, with consideration for grammar, punctuation and spelling throughout, including the minimum components:

• Cover Page to include:

o Module Title

o Course Code

o Your Student ID

o Date of Submission

• Table of Contents

• Body of your report (2,000-word guide)

• Any supporting diagrams and tables

• Harvard reference style used correctly

• An appendix if necessary

The student will automatically be awarded a fail if:

• The report is not submitted within University agreed timescales

• The content of the report is meaningless in terms of the assignment

• The work is not the work of the author and is presented as such

Intended learning outcomes for the assessment

• Knowledge and Understanding: Analyse the motives, origins and techniques used by attackers of network-based information systems and evaluate the role of cryptography.

• Knowledge and Understanding: Compare and contrast the use of cryptographic techniques for ensuring the confidentiality, integrity and availability of information systems.

• Intellectual, practical, affective and transferable skills: Critically appraise the security of a system in terms of the principles of confidentiality, integrity availability and non-repudiation.