Identified issues in networks, Computer Network Security

Assignment Help:

The "Big Red Rocks" (BRR) mining company is based and operates in Western Australia. They are primarily an iron ore miner, but they also produce electricity through tidal power to support their crushing operations, with any excess power sold back to the power grid through the electricity market. BRR maintains a head office in Perth, and a site office in Port Hedland. There is also a control system network operated at their crushing plant outside of Port Hedland. There is a requirement for database information from the crusher site to be sent to Perth for accounting and other purposes. BRR has been informed by CERT Australia that some of their internal documents have been found on external third party websites, and that they have significant security issues which need to be rectified. You are a network security consultant who has been hired to advise on the issues present in the current architecture and associated network security issues.

The following hardware and software is in operation at each site:

Perth Head Office

  • 200 client desktop PCs running Windows Vista
  • Web server (external) running Apache on Redhat Linux
  • MS Exchange Server on Windows Server 2008
  • 802.11 wireless using WPA TKIP
  • Executives have iPads to access the internal network
  • Connection between Head Office and PH Site over Telco private WAN
  • External Access is via VPN (PPTP) user name and password
  • There is an AV server
  • Port Hedland Office
  • Runs 20 PCs with Windows Vista
  • Authentication to ADS over the WAN link to Perth
  • Connected to mine site via 802.11 wireless (WPA TKIP)

Mining Site

  • No ADS - all PCs belong to a workgroup
  • Connection to PH Site Office via 802.11g point to point link (WPA TKIP)
  • 10 PCs running Windows Vista in the office
  • 5 PCs running Windows NT in the control room (NOTE: This cannot be changed as the SCADA software will not run on a newer OS)
  • There are no individual logons or passwords on the control room PCs (Usernames and passwords cannot be implemented as this is an operational issue)
  • SCADA engineers remotely connect to the mine site through a VPN Server PPTP

 

Other information:

  • The network security policy has not been updated since 2005
  • There is no patching regime
  • See attached network diagram (Note: this may be out of date but is the most current we can find)
  • The VPN at the Head Office and the VPN at the mine site are not connected

 

Tasks:

You are required to produce the following deliverables as part of your contract:

1. A list of the issues with BRRs network as it currently stands. The list will explain the vulnerabilities associated with each issue

2. Treatment recommendations to address the identified issues in BRRs networks

3. A detailed network diagram which creates a more secure network for BRRs operations

4. Updated network security policies which take into consideration current issues and hardware


Related Discussions:- Identified issues in networks

What is the role of an intrusion detection system, Problem: (a) What i...

Problem: (a) What is a firewall and which are its most important tasks? (b) What is the difference between default deny and default permit? Which advantages and disadvanta

Software vulnerabilities, 1.  We used the National Vulnerability Database. ...

1.  We used the National Vulnerability Database. Select a recent vulnerability from that Database and analyse it from the following aspects: Criticality level Impact in

Securing the network using a packet filter firewall, 1. Network Design ...

1. Network Design Design your network giving appropriate IP addresses for your hosts. Provide a topology and table showing your addressing scheme. 2. F i re wall po

Vulnerability identification-risk management, Vulnerability Identification ...

Vulnerability Identification Specific avenues threat agents can exploit to attack an information asset are known as vulnerabilities. Examine how each threat can be generated and

The cost benefit analysis (cba) formula, The Cost Benefit Analysis (CBA) Fo...

The Cost Benefit Analysis (CBA) Formula CBA determines that whether the control alternative being evaluated is worth cost incurred to control vulnerability or not. CBA easily ca

Tcp- reliable transport service, TCP-RELIABLE TRANSPORT SERVICE INTRO...

TCP-RELIABLE TRANSPORT SERVICE INTRODUCTION:  TCP is the major transport protocol architecture in the TCP/IP suite. It uses unreliable datagram function offered by IP whe

Direct indexing, DIRECT INDEXING It is less usually known method. It i...

DIRECT INDEXING It is less usually known method. It is possible only is cases where protocols address are given from a compact range. In the diagram below an example of direct

Wireless local area network, a) Wireless local area network (WLAN) technol...

a) Wireless local area network (WLAN) technologies constitute a fast-growing market introducing the flexibility of wireless access into office, home, or production environments. G

Ip datagram format, IP DATAGRAM SIZE:  Datagrams may have different si...

IP DATAGRAM SIZE:  Datagrams may have different sizes i.e. Header area is generally fixed (20 octets) but can have various options. Data area may contain between 1 octet and 6

Architecture of www named world wide web, Write down short notes on the arc...

Write down short notes on the architecture of WWW which is World Wide Web. WWW which means The World Wide web or the web is a repository of information spread worldwide and rel

Write Your Message!

Captcha
Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd