Reference no: EM132415162

MN623 - Cyber Security and Analytics - Melbourne Institute of Technology

Purpose of the assessment

This assignment assesses the following Unit Learning Outcomes; students should be able to demonstrate their achievements in them.
c) Evaluate intelligent security solutions based on data analytics
d) Analyse and interpret results from descriptive and predictive data analysis

Assignment Overview

For this assignment, you will analyses and evaluate one of the publicly available Network Intrusion datasets given in Table 1.

Your task is to complete and make a research report based on the following: 1- Discuss all the attacks on your selected public intrusion dataset.

2- Perform intrusion detection using the available data analytic techniques using WEKA or other platforms.

3- In consultation with your lecturer, choose at least three data analytic techniques for network intrusion detection and prepare a technical report. In the report, evaluate the performance of data analytic techniques in intrusion detection using comparative analysis.

4- Recommend the security solution using the selected data analytic technique.

Table 1

Section 1: Data Analytic Tools and Techniques

In this section, your task is to complete and write a report on the following:

1. Install/deploy the data analytic platform of your choice (on Win8 VM on VirtualBox).
2. Demonstrate the use of at least two data analytic techniques (e.g. decision tree, clustering or other techniques) - you are free to use any sample testing data to demonstrate your skills and knowledge.
3. Lab demonstration: Must explain how each tool technique works in your lab prior to week 11. Data can be anything including Iris dataset.

Section 2: Evaluation of the Penetration Test (PT) of the given Dataset of UNSW in Table1

1. Select from UNSW example of the dataset, cvs, pcap and bro files to evaluate the result of the penetration test as explained below

2. For csv files you need to generate statics to identify the total number of attacks related to DOS, Exploits, generic, reconnaissance, shellcode, and worms and display the result in a graph and shows the percentage of attacks compared to normal traffic. (need to submit the excel csv file you analyzed with your report)

3. Use Wireshark to open the cap file and generate report with different statistics related to: Resolved address DNS, http Packet length TCP Throughput

4. Use bro file and analyse results and write report on the type of traffic generated. Then, convert Bro Logs to Flows, where you can convert the Bro logs into IPFIX (using IPFIX utility) by defining your own elements and templates, then create bro report by filtering and thresholds to watch for specific events or patterns

Section 3: Data Analytic for Network Intrusion Detection (using Weka if possible)

Perform the following tasks and write a full report on your outcomes:
1. Convert the benchmark data suitable for the data analytic tools and platform of your choice. Explain the differences in the available data format for data analytics.
2. Select the features with rationale (external reference or your own reasoning).
3. Create training and testing data samples.
4. Evaluate and select the data analytic techniques for testing.
5. Classify the network intrusion given the sample data.
6. Evaluate the performance of intrusion detection using the available tools and technologies (e.g. confusion matrix).
7. Identify the limitation of overfitting.
8. Evaluate and analyse the use of ensemble tools.
9. Recommend the data analytic solution for the network intrusion detection.
10. Discuss future research work given time and resources

Assignment - Security issues in Cloud Computing

Purpose of the assessment

This assignment assesses the following Unit Learning Outcomes; students should be able to demonstrate their achievements in them.

c. Analyse and model system functionality and behaviour.
d. Compare and contrast different approaches to system analysis and design, such as object-oriented, agile, and service oriented techniques
e. Analyse and model the functional and non-functional requirements of a software system
f. Design and deploy functional solutions, such as initiating, analysing and implementing system plans

Assignment - Specifications

The purpose of this assignment is to acquire fundamental knowledge on cyber security and cloud computing and become familiar with issues and challenges of the domain. They shall identify the key security challenges and contrast two cloud service providers and their services with regards to their security offerings. By doing this assignment, they will acquire a good understanding of security challenges available to cloud service providers and their service offerings. This may later help them to determine appropriate services for developing.

Security issues in Cloud Computing Requirements:

Services offered for smart applications development such as Internet of Things (IoT) applications for instance an Integrated Cloud-Based Smart Home Management System, Artificial Intelligence (AI) applications etc. may be considered for the assignment.
• Brief write up on cloud computing environment
• To identify the cloud service providers (at least three) and analysis of their salient features with regards to cyber security.
• Identify cloud security issues experienced with software-as-a-service (SaaS).
• Identify cloud security issues experienced with infrastructure-as-a-service (IaaS).
• Identify cloud security issues experienced with private cloud.
• The level of difficulty for development and deployment process of the cloud environment. (Challenges faced).
• How easy is it to manage a cloud application in the context of the following?
• Allocate and upgrade resources like memory, space, etc.
• Update/amend host URL, hosting data center and program/code of the application.

Analysis:
• Your opinion - Based on your comparison and contrast of three cloud providers, which service provider are better and why?
• For each propose one area of improvement, that you would like to see over their current services and why?
• Recommendations for mitigating the top security issues in cloud computing.

• Conclusion
• References

Attachment:- Data analytics for intrusion detection.rar