ITNE2002Network and Information SecurityAssignment 2January 2020ITNE2002 Assignment 2Copyright © 2020 VIT, All Rights Reserved.The purpose of assignment 1 is to assess students on the following LearningOutcomes:LO2: Analyse a range of information security risks and privacy issues as well as countermeasures adopted in industry.LO3: Develop secure infrastructure with proper use of cryptographic, key distribution systemsand network access control mechanisms.LO4: Investigate the application security incidents and apply the appropriate countermeasures to improve the security of those applications.LO5: Apply security controls and standard compliance policies to maintain confidentiality,integrity and availability, including encryption and firewall defence mechanisms.Task:Consider the given scenario and create a report that address the issues and provide a solution.The report should be prepared in Microsoft word and uploaded on to the LMS. The word limitof the report is 2500 words. The report should be a properly constructed as an academicreport. The report should include references in IEEE style.__________________________________________________________________________________Submission Guidelines:The report should have a consistent, professional, and well-organized appearance.1. Your report should include the following:? The cover page must identify student names and the ID numbers, unit details, andthe assignment details.? The assignment must use 12-point font size and at least single line spacing withappropriate section headings.? In-text referencing in IEEE style must be cited in the text of the report and listedappropriately at the end in a reference list.2. The report must be submitted in soft (electronic) copy as a Microsoft Word documenton the LMS in Turnitin dropbox. Assignments submitted on the LMS will only beaccepted.3. Late penalty applies on late submission, 10% per day would be deducted.4. The assignments will go through Turnitin and plagiarism penalty will be applied.The report must be submitted in soft (electronic) copy as a Microsoft Word document via theupload link available on Moodle.__________________________________________________________________________________Total Marks: 25%Individual AssignmentITNE2002 Assignment 2Copyright © 2020 VIT, All Rights Reserved.Project OverviewYou are appointed as a network and information security officer in a private IT securitycompany, which provides security services and expertise to private and public clients. Youhave been assigned to provide a network and information security to one of the companiesthat works with data communication and e-commerce.As their business is expanding rapidly, the company needs to devise effective network securitystrategies because:? Security breaches can be very expensive in terms of business disruption and thefinancial losses that may result.? Increasing volumes of sensitive information are transferred across the internet orintranets connected to it.It was figured out that hackers have been trying to take advantage of less technical people inthe company. Hence, you are asked by
the company to provide a complete security solution.Available Assets:Information assets Databases: Contains information critical to your business. Data files: Information stored within file outside of a database.Software assets Application software: Implements business processes. System software: Operating Systems, Mobile OS, VOIP, Firewall etc.Physical assets Computer equipment: Desktops, laptops, phones, servers. Communication equipment: PBX, POP gateway, routers, switches. Storage media: Off/on site backup media, software inventory, etc. Technical equipment: UPS, server racks, wiring closet(s), etc. Security equipment: Firewall.Your company carried out the security risk assessment for the hazard identification, riskanalysis, and risk evaluation based on the available assets. As a result, they identified severalthreats:1) Database threatsa. Credential threatsb. Privilege Threatsc. System Threatsi. SQL injectionsii. Cloud2) Network Security Threatsa. Network Ransomware Attacksb. Denial of Service AttacksITNE2002 Assignment 2Copyright © 2020 VIT, All Rights Reserved.c. Identity Spoofingd. SSL/TLS Attackse. Penetration Testingf. Browser Attacks__________________________________________________________________________________Based on the security risk assessment, your task is to create a report thatincludes the following information:? Purpose of the Project (Background)? Based on your companys Risk assessment, justify and answer the following questionso Explain briefly about the identified threats (any two from each identifiedthreats)o Based on the identified threats, explain the possible consequences of failing tomanage threats.? Propose Solutiono Overview of Security Mechanismo Propose a solution, which employs a security mechanism including,cryptographic algorithms, network access control and other possible securitysolutions. Justify the selection of your security mechanism.o Explain how the company will maintain the security (security policies),considering the CIA triads.o The company has both software and hardware firewalls. Explain the purposeof having both firewalls.? Conclusion________________________________________________________________________________Marking Guide: 100 Marks TaskDescriptionMarksBackgroundExplain briefly about the purpose of the Project10Threats andSecurity risksExplain briefly about the identified threats (any two from eachidentified threats)Based on the identified threats, explain the possibleconsequences of failing to manage threats.20ProposedSolutionOverview of Security MechanismPropose a solution, which employs a security mechanismincluding, cryptographic algorithms, network access control and50 ITNE2002 Assignment 2Copyright © 2020 VIT, All Rights Reserved. other possible security solutions. Justify the selection of yoursecurity mechanismExplain how the company will maintain the security (securitypolicies), considering the CIA triads.The company has both software and hardware firewalls. Explainthe purpose of having both firewalls.ConclusionSummary of the report10ReferencesFollow the IEEE style10