...Coursework Assignment Title: Perimeter Network Security System Outline Requirements The University is based in Glasgow, and provides higher education services to its students and staff. It is located on a single campus called Campus A. Students and staff use the network services from hosts on various different user networks, as shown in Figure 1 . Due to an increasing number of security violations, a possible redesign of the network infrastructure is to be investigated. You have been hired as a consultant to propose security enhancements, and produce a report. The aim of the exercise is to present a possible solution to the problem at hand by creating a prototype of the new network security infrastructure. This new design should tackle the following components: Provide best practice network egress and ingress filtering at the network perimeter. Create a perimeter firewall, with an appropriate topology to provide the organisations services, including public web, and mail servers. The firewall should have a closed security stance, and provide public services in a secure way. Provide secure access to all devices, from the security management subnet. Additionally, research should be carried out into increasingly common Advanced Persistent Threats (APT), and ways to defend against these using network defenses. This part of the coursework will be research only and be confined to a part of the Research Section. You will be required...
Words: 607 - Pages: 3
...distribution, to name a few. As with most technological advances, there is also a dark side: criminal hackers. Governments, companies, and private citizens around the world are anxious to be a part of this revolution, but they are afraid that some hacker will break into their Web server and replace their logo with pornography, read their e-mail, steal their credit card number from an on-line shopping site, or implant software that will secretly transmit their organization’s secrets to the open Internet. With these concerns and others, the ethical hacker can help. This paper describes ethical hackers: their skills, their attitudes, and how they go about helping their customers find and plug up security holes. The ethical hacking process is explained, along with many of the problems that the Global Security Analysis Lab has seen during its early years of ethical hacking for IBM clients. T he term “hacker” has a dual usage in the computer industry today. Originally, the term was defined as: HACKER noun 1. A person who enjoys learning the details of computer systems and how to stretch their capabilities—as opposed to most users of computers, who prefer to learn only the minimum amount necessary. 2. One who programs enthusiastically or who enjoys programming rather than just theorizing about programming. 1 This complimentary description was often extended to the verb form “hacking,” which was used to deIBM SYSTEMS JOURNAL, VOL 40, NO 3, 2001 scribe the rapid crafting of a new program or...
Words: 6482 - Pages: 26
...distribution, to name a few. As with most technological advances, there is also a dark side: criminal hackers. Governments, companies, and private citizens around the world are anxious to be a part of this revolution, but they are afraid that some hacker will break into their Web server and replace their logo with pornography, read their e-mail, steal their credit card number from an on-line shopping site, or implant software that will secretly transmit their organization’s secrets to the open Internet. With these concerns and others, the ethical hacker can help. This paper describes ethical hackers: their skills, their attitudes, and how they go about helping their customers find and plug up security holes. The ethical hacking process is explained, along with many of the problems that the Global Security Analysis Lab has seen during its early years of ethical hacking for IBM clients. scribe the rapid crafting of a new program or the making of changes to existing, usually complicated software. As computers became increasingly available at universities, user communities began to extend beyond researchers in engineering or computer science to other individuals who viewed the computer as a curiously flexible tool. Whether they programmed the computers to play games, draw pictures, or to help them with the more mundane aspects of their daily work, once computers were available for use, there was never a lack of individuals wanting to use them. Because of this increasing popularity of computers...
Words: 6481 - Pages: 26
...IS4550 Security Policies and Implementation INSTRUCTOR GUIDE Course Revision Table Change Date | Updated Section | Change Description | Change Rationale | Implementation Quarter | 12/20/2011 | All | New curriculum | | June 2012 | | | | | | | | | | | | | | | | | | | | | | | | | | ------------------------------------------------- ------------------------------------------------- Credit hours: 4.5 Contact/Instructional hours: 60 (30 Theory, 30 Lab) Prerequisite: IS3110 Risk Management in Information Technology Security or equivalent Corequisite: None Table of Contents Course Overview 5 Course Summary 5 Critical Considerations 5 Instructional Resources 6 Required Resources 6 Additional Resources 6 Course Management 8 Technical Requirements 8 Test Administration and Processing 8 Replacement of Learning Assignments 9 Communication and Student Support 9 Academic Integrity 10 Grading 11 Course Delivery 13 Instructional Approach 13 Methodology 13 Facilitation Strategies 14 Unit Plans 15 Unit 1: Information Security Policy Management 15 Unit 2: Risk Mitigation and Business Support Processes 25 Unit 3: Policies, Standards, Procedures, and Guidelines 33 Unit 4: Information Systems Security Policy Framework 42 Unit 5: User Policies 50 Unit 6: IT Infrastructure Security Policies 58 Unit 7: Risk Management 66 Unit 8: Incident Response Team Policies 74 Unit 9: Implementing...
Words: 18421 - Pages: 74
...of a system would have on national security or your company's bottom line. Identifying threats To identify threats, look at the organization, the guardian organization and the business/nation. At each one level, focus the risk by inquiring as to whether an assailant can represent a danger. Does somebody have the inspiration to endeavor a helplessness? Is there a background marked by effective endeavor? Does somebody have a past filled with focusing on your industry? An alternate approach to distinguish dangers is to consider the properties the association may have: divulgence (trading off radiations, capture, dishonorable support techniques, programmers); interference (tremor, flame, surge, malignant code, power disappointment); adjustment (information passage blunders, programmers, noxious code); decimation (force spikes, fire, characteristic catastrophes); and evacuation (burglary of information or frameworks). To focus vulnerabilities, utilize the grid to meeting staff, audit past security occurrences, and analyze review and framework records and framework documentation. Contact merchants for reports of known framework vulnerabilities, check counseling Web locales and search for security issues by utilizing computerized apparatuses. Utilizing the grid, what vulnerabilities exist in the association's physical regions as connected to data security? Investigate discoveries from your perceptions and staff meetings, hazard evaluation and verifiable site studies, audits...
Words: 1345 - Pages: 6
...Usability Report Design Human Computer Interaction Fauzi Akbar – u3097985 Table of Contents Table of Contents2 Introduction3 Evaluation4 Background4 User and User Task4 Currency5 Consistency6 Page Layout7 Security8 Instrument9 Background9 Design and Process Evaluation9 Optimizing User Experience9 Accessibility9 Currency9 Page Layout9 Navigation10 Consistency10 Security10 Conclusion10 Reference List11 Introduction Process of Evaluation This report is the evaluation of the Gumtree website at http://www.gumtree.com.au/ The usability report represents the process of developing an evaluation instrument specifically for the evaluation of the Gumtree at http://www.gumtree.co.au/. The evaluation was directed to determine the quality of the website using the instrument that was made base on HHS guidelines. The data was collected from the website using an evaluation instrument that was developed (see document 1). HHS guidelines and WCAG 2.0 guidelines were used to create a set of criteria for the evaluation instrument (see document 1). The instrument was used to determine and describe data about: * The users of the website * Who are they? * What tasks they need to do? * The Positive and Negative of the website * What can be improved? * What can be maintained? * Is the website trustworthy and safe? * Is the website easy to navigate? * The user experience ...
Words: 2587 - Pages: 11
...[pic] STATE GOVERNMENT DEPARTMENT OF FINANCE AND ADMINISTRATION REQUEST FOR PROPOSALS FOR INFORMATION SECURITY ASSESSMENT SERVICES (ISAS) RFP NUMBER: 427.04-107-08 |CONTENTS | |SECTION | | |1 |INTRODUCTION……………………………………………………………………………….3 | |2 |RFP SCHEDULE OF EVENTS………………………………………………………………..................................6 | |3 |PROPOSAL REQUIREMENTS………………………………………………………………7 | |4 |GENERAL REQUIREMENTS & CONTRACTING INFORMATION………………….…..9 | |5 |PROPOSAL EVALUATION & CONTRACT AWARD…………………………………....13 | | | |RFP ATTACHMENTS: | | ...
Words: 40549 - Pages: 163
...A DILEMMA FOR HOMELAND SECURITY by Thomas L. Rempfer December 2009 Thesis Advisor: Second Reader: Stanley Supinski Dean Lynch Approved for public release; distribution is unlimited THIS PAGE INTENTIONALLY LEFT BLANK REPORT DOCUMENTATION PAGE Form Approved OMB No. 0704-0188 Public reporting burden for this collection of information is estimated to average 1 hour per response, including the time for reviewing instruction, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden, to Washington headquarters Services, Directorate for Information Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 22202-4302, and to the Office of Management and Budget, Paperwork Reduction Project (0704-0188) Washington DC 20503. 1. AGENCY USE ONLY (Leave blank) 4. TITLE AND SUBTITLE 2. REPORT DATE December 2009 3. REPORT TYPE AND DATES COVERED Master’s Thesis 5. FUNDING NUMBERS Anthrax Vaccine as a Component of the Strategic National Stockpile: A Dilemma for Homeland Security 6. AUTHOR(S) Thomas L. Rempfer 7. PERFORMING ORGANIZATION NAME(S) AND ADDRESS(ES) Naval Postgraduate School Monterey, CA 93943-5000 9. SPONSORING /MONITORING AGENCY NAME(S) AND ADDRESS(ES) N/A 8. PERFORMING ORGANIZATION REPORT NUMBER 10. SPONSORING/MONITORING...
Words: 3672 - Pages: 15
...METHODOLOGY 10 DELIVERABLES 11 PROJECT MANAGEMENT APPROACH 11 DETAILED AND ITEMIZED PRICING 11 APPENDIX: REFERENCES 11 APPENDIX: PROJECT TEAM STAFFING AND BIOGRAPHIES 11 APPENDIX: COMPANY OVERVIEW 12 EVALUATION FACTORS FOR AWARD 13 CRITERIA 13 SCOPE OF WORK 14 REQUIREMENTS 14 DELIVERABLES 14 USING THIS TEMPLATE Savid Technologies has developed this Request For Proposal (“RFP”) template to help organizations identify and select a quality security vendor to perform professional services work. This template is absed off templates provided by Foundstone, Verisign, and other security institutions including countless RFP responses Savid has provided. It also lists questions organizations should consider asking potential vendors to ensure that a thorough and comprehensive approach to the project will be taken. This template should apply for a variety of information security projects including: External Network Vulnerability Assessment and Penetration Testing Internal Network Vulnerability Assessment and Penetration Testing Web Application Penetration Testing Dial-In / RAS Security Testing DMZ or Network Architecture Designs / Reviews Wireless Network Assessment and Penetration Testing Virtual Infrastructure Security Assessment Server Configuration Reviews Firewall and Router Configuration Reviews VPN Configuration...
Words: 2629 - Pages: 11
...Process Evaluation DRAFT Report School Community Liaison and Security Programme Prepared for the National Committee for Families and Children (NPA M&E Sub-Committee);and Ministry of Education, Youth & Sports John D. Flowers Table of Contents Executive Summary ......................................................................................................................... Error! Bookmark not defined. 1.0 1.2 1.2.1 1.2.2 1.1.3 2.0 2.1 2.2 2.1 2.2 3.0 3.1 3.2 3.2.1 3.2.2 3.2.3 3.2.4 3.2.5 3.3 3.5 3.5.1 3.5.2 3.5.3 3.5.4 3.6 Background ................................................................................................................................................................................ 2 Project Description and Scope .......................................................................................................................................... 3 Purpose of the Consultancy ..................................................................................................................................... 4 Scope ............................................................................................................................................................................ 4 Key Activities and Main Deliverables .................................................................................................................... 4 Evaluation Design and Framework .....................................................................
Words: 8567 - Pages: 35
...Gathering the data 4 Processing the data 5 Analyzing the data 6 Presenting and using the information 7 Implementing corrective action Repeat the Process Inputs Each activity has inputs Outputs Each activity has outputs Roles Process Owner, Service Manager, CSI Manager, Service Owner Knowledge Management Process Owner Reporting Analyst Service Measurement and Reporting Goal To monitor services and report on improvement opportunities Activities Service Measurement •Objective (Availability, Reliability, Performance of the Service) •Developing a Service Measurement Framework •Different levels of measurement and reporting •Defining what to measure •Setting targets •Service management process measurement •Creating a measurement framework grid •Interpreting and using metrics •Interpreting metrics •Using measurement and metrics •Creating scorecards and reports •CSI policies Service Reporting •Reporting policy and rules Inputs SLA Targets, SLRs, OLAs, Contracts Outputs Service Improvement Program, SLAM Reports Roles Process Owner, Service Manager, CSI Manager, Service Owner Knowledge Management Process Owner Reporting Analyst Service Strategy Deming Cycle – Plan Do Check Act Goal The goal in using the Deming Cycle is steady, ongoing improvement. It is a fundamental tenet of Continual Service Improvement. Activities ITIL® V3 Continual Service Improvement Goal ITIL® V3 Continual Service Improvement...
Words: 4361 - Pages: 18
... | |Daytona State College Cell phone Bomb Threat Seminar | | | Table of Contents Introduction & Background 3 Mission 3 Exercise Design & Evaluation Plan 4 Capabilities 4 Embry-Riddle Aeronautical University 4 Demographics 5 Residential Campus Student Demographics (Fall 2013) 5 Exercise Overview 6 Exercise Design & Development Plan 6 Exercise Needs 6 Exercise Purpose 6 Exercise Scope 7 Exercise Objectives 7 Participants 7 Players 7 Moderator 7 Facilitator 8 Mediators 8 Scenario 8 Initial Scenario 8 Secondary Scenario 12 Exercise Development 13 Exercise Timeline 13 Milestones and Tasks 14 Evaluation Guides (EEGs) 14 Capability 14 Capability Outcome 14 Tasks 15 Public Education & Training 15 HSEEP Compliance 16 Planning & Organization 16 Observation & Data Collection 17 Analyze Data 17 Draft After-Action Report (AAR) 18 After Action Conference 19 Identify Improvements & Implementation 20 Finalize the AAR and IP 20 Track Implementation 20 Recruit/Assign/Train 21 Conclusion & Recommendations 21 Recommendations 23...
Words: 4022 - Pages: 17
...Monitoring & Evaluation of Credit Where Credit & Commerce Integrates Background of the Study 1.1 Origin of the Report: Internship Program brings a student closer to the real life situation and thereby helps to launch a career with some prior experience. It is also a part of our education. In our university we learn only theoretical knowledge but to collect practical knowledge we have to do intern. One of the main objectives of the BBA program is to create skilled professional for various sectors. This program is designed to meet the needs of each student who want to develop their career as executives in the field of different business areas as well as teaching and research positions in different institutions. BGC Trust University Bangladesh offered an opportunity to do intern. For the competition of this internship program, the author of the study was placed in a bank namely, “National Credit & Commerce Bank Limited”. My paper topic is monitoring and evaluation of credit of NCC Bank. My internship was at NCC Bank Ltd., Anderkilla Branch, Chittagong. During my internship, I had to prepare a report under the supervision of Mrs . 1.2 Objective of the Report: Project Objective: Presenting and Emphasizing on credit operation, credit risk management and credit performance including the credit payment system. Secondary objective: Objectives assist the researcher to advance objectively. The followings objectives may be with this identified study as presented below: Knowing the...
Words: 13972 - Pages: 56
...Portfolio Management Project FNAN 311-003 Spring 2016 FNAN 311 is designed to provide students with an introduction to modern portfolio management and asset valuation. Through this course, students will gain a systematic understanding of financial markets, the various types of financial instruments, and the main investment theories. The group project provides students an opportunity to apply modern investment strategies and risk management tools to near real-world portfolio management without real-world risk. Students are required to design a trading strategy (including security selection), implement the strategy (execute the trades), and evaluate the performance of the portfolio. The trading platform for the project is the Virtual Stock Exchange at http://www.marketwatch.com/game/ (or www.marketwatch.com/game/patriotfinance2016). Password: patriotFinance2016. The Scenario You are beginning your new job with Patriot Investment Strategies, a mutual fund family managing approximately $50 billion in assets. Patriot has a variety of funds with various objectives. You and two or three of your associates, as a group, have been asked by management to create and manage a new fund based on your own ideas, benchmarking the performance of the fund against an existing index. You have learned that the other forty new associates at Patriot have received similar assignments, and that the performance of each fund will be evaluated by management six weeks after the inception of each fund...
Words: 1635 - Pages: 7
...Information Systems Security (Project Description) * Each student work alone in this project (individual project). * Each student is required to complete a mid-size project, which includes proposal, implementation, and final demo or paper. * Students will be grouped into teams for the sake of presentations at the end of the semester. Marks allocated for each individual piece of the project are as follows: a) Proposal – 10% b) Project write-up – 22% c) Presentation – 8% Projects include but are not limited to: * Research Paper * You can work on original research problems. The outcome should be a paper with original technical contribution. Your grade on this will be judged on originality, soundness of the approach, and quality of presentation. * Example Topics: * Vulnerability Analysis * Wireless Security * Intrusion Detection * Authentication * Access Control * Authorization * DNS Security * Digital Watermarking * New Attacks * Survey Paper * You can write a paper that surveys a particular field on information security. The outcome should be a paper that summarizes the trend in the field you have chosen. Your grade will be judged on the completeness of the survey, the quality of the trend analysis, and the quality of presentation. * Example topics: * Vulnerability Analysis * Wireless Security ...
Words: 1209 - Pages: 5
