Category: Uncategorized

Explain network security management-flow diagram

Network Security Management-flow diagram, assets and detail of functions (see case study MIIS after questions). I have completed the assets and flow diagrams and interfaces.

Homework Question
1. Start the systems engineering on the for MIIS, based on the prior homework assignments:

a. Decompose MIIS into the basic functions that are required: provide a brief description of each component, and put together a MIIS functional architecture diagram that shows these functions, the interfaces among the functions, and the interfaces to things outside of MIIS.
b. Create an Information Asset Inventory of all the security critical data items in MIIS. Note that these assets should be an important subset of all the IT assets.
c. For each item in the Information Asset Inventory, identify all the functions that it used in and every interface it goes over. This will help to see where each of the information assets has to be protected: the places where it is stored, and the places where it is “in transit” This is key step in the security engineering for the homework and for the project.
d. Use the set of prioritized risks from last week as the basis for a set of security requirements for MIIS. These priorities should have been based on the combination of impact and likelihood, with the most important (highest impact, highest likelihood) as the highest priority. Since the list is prioritized, you can shorten the list by eliminating the least important ones such as the low/low, low/medium, medium/low impact/likelihood risks (assuming you used at least a 3 choice scale for impact and likelihood, and low, medium are the two lowest points on the scale). Be clear, however, about which risks you are dropping. This is primarily to save work on this and the next homework. In practice, you may or may not drop the lowest priority risks.
e. Allocate these requirements to the appropriate elements of the MIIS functional architecture in part a of this homework.

Research and devise a plan to thwart malicious code

You are a Security professional hired by NextGard Technologies in Phoenix, AZ to provide a Windows security implementation model for their organization. NextGard specializes in network consulting services for US companies and they want to upgrade and secure their current network.

NextGard has 250,000 employees in 5 countries. The Phoenix office operates as the NextGard Corporate headquarters. Currently there are five district offices:

• Atlanta, Georgia

• Bangalore, India

• Los Angeles, California

• Montreal, Canada

• New York City, New York

The district offices have satellite employees that have a combination of desktops, mobile computers and wireless devices. There is a mix of computers running Windows 2000, XP, Windows Vista and Windows 7. There is a Windows Active Directory forest with domains set up for each office and seven file and print servers which are located in the Phoenix office. The Phoenix office also contains two proxy servers, configured as an array, that provide Web cache services and Internet access control for the organization since the majority of applications are web-based and hosted from the Phoenix office.

There are also several Microsoft applications that all employees within a region use that are hosted in the regional offices. All employees have Internet access so they can browse the web.

Tasks (Paper Sections):

For the assigned project, you are to submit a proposal for the management of NextGard. In the proposal, you must address the following:

Research solutions and detail the appropriate Microsoft Windows access controls including policies, standards and procedures that define who users are, what they can do, which resources they can access, and what operations they can perform on a system.

Research and detail the cryptography methods to protect organizational information using techniques that ensure its integrity, confidentiality, authenticity and non-repudiation, and the recovery of encrypted information in its original form.

Research and devise a plan to thwart malicious code and activity by implementing countermeasures and prevention techniques for dealing with viruses, worms, logic bombs, Trojan horses and other related forms of intentionally created deviant code.

Research and formulate a plan to implement monitoring and analysis by determining system implementation and access as well as an incident response plan for security breaches or events.

Research and detail security guidelines for contains the two proxy servers and Internet access control for the organization

Research and define best practices for the security of NextGard’s organization.

Conclusion summarizing your findings and recommendations for the reader.

The Network topology must include all of the sites and the network infrastructure required to provide the services described in the Final Project Scenario in the section above.

Elements of an effective it security policy framework

Case Study: SCADA Worm

Protecting the nation’s critical infrastructure is a major security challenge within the U.S.  Likewise, the responsibility for protecting the nation’s critical infrastructure encompasses all sectors of government, including private sector cooperation. Search on the Internet for information on the SCADA Worm.

Write a three to five (3-5) page paper in which you:

1. Describe the impact and the vulnerability of the SCADA / Stuxnet Worm on the critical infrastructure of the United States.
2. Describe the methods to mitigate the vulnerabilities, as they relate to the seven (7) domains.
3. Assess the levels of responsibility between government agencies and the private sector for mitigating threats and vulnerabilities to our critical infrastructure.
4. Assess the elements of an effective IT Security Policy Framework, and how these elements, if properly implemented, could prevent or mitigate and attack similar to the SCADA / Stuxnet Worm.
5. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Discuss the risks of having a single root user

Task

1. Originally Linux/UNIX systems had one all-powerful user called root that managed systems. Discuss the risks of having a single root user and how more limited management abilities can be given to others users on Linux/UNIX systems. Include a sample generic policy for a limited user from which a configuration could be written. (500 words)

2. Attempt to install the following web applications on Linux. The Moodle Learning Platform link: http://moodle.org, The Etherpad shared document editing system link: http://etherpad.org, and The Community version of the Alfresco Enterprise Content Management System link: http://alfresco.com. You should write a short report documenting each of the installations even if you don’t get the applications running. (3 to 5 pages per report)

Rationale
This assessment item is designed to test your ability formulate methods for protecting data and services, to create and manage information services, and produce coherent and knowledgeable writings in these topic areas.

Write udp programs to establish communication channel

Assignment

Objectives

On completion of this assignment you should be able to:

– Understand some basic techniques for building a secure channel.
– Understand network programming.

Write (Java or C/C++) UDP programs allowing two parties to establish a secure communication channel. For simplicity, let us call the programs “Host” and “Client”, which are executed by Alice and Bob, respectively.

Alice and Bob share a common password PW which contains 8 alphanumeric characters. They want to establish a secure communication channel that can provide data confidentiality and integrity. They aim to achieve this goal via the following steps: (1) use the password to establish a shared session key; (2) use the shared key to secure the communication.

Step 1 is done via the following key exchange protocol:

1: A → B: E_PW(KA)
2: B → A: E_PW (KB)

Alice and Bob then compute the shared key as K = Hash(KA||KB). KA and KB are both 128-bit random binary strings, and || denotes string concatenation. Alice and Bob decide to use AES as the encryption function, and MD5 as the Hash function.

After establishing the session key, step 2 is achieved as follows:

1. whenever Alice wants to send a message M to Bob, Alice first computes H = Hash(K||M), and then computes C = E_K(M||H) and sends C to Bob.

2. upon receiving a ciphertext C, Bob first runs the decryption algorithm to obtain M||H = D_K(C). After that, Bob computes H’ = Hash(K||M) and checks if H = H’. If the equation holds, then Bob accepts M; otherwise, Bob rejects the ciphertext.

3. the same operations are performed when Bob sends a message to Alice.

Implementation guidelines

– Place Host and Client in two separate directories: Alice and Bob. The shared password is located in a file under each directory.

– Alice executes Host.

– Host is running and listening to the opened port (you need to select a port for your code).

– Bob executes Client.

– Client (Bob) sends a connection request to Host.

– Client is ready and listens to the port.

– Host generates a random KA, encrypts it using AES, and sends the ciphertext to Client.

– Upon receiving the message from the Host, Client decrypts the message to obtain KA, randomly chooses KB, encrypts it and sends the ciphertext to Host. Client then computes the shared key K based on KA and KB.

– Upon receiving the message from Client, Host performs the decryption to obtain KB and then computes the shared key K.

– Now, the secure channel is established.

– Either Alice or Bob can send a message encrypted and authenticated by the key K. They type the message on their own terminal. The message is processed by their code (Host or Client) according to the step 2 description given above.

– The received message is printed on the screen if decryption is successful. Otherwise, print “decryption error” on the screen.

– To quit the program, the client should type “exit”.

Coding requirement:

You need to write two programs: Host and Client. You should name your programs: host.cpp or host.java and client.cpp or client.java.

You can choose to use some existing libraries or free source code to implement AES and MD5. You should cite the source if you use a downloaded code. Important: make sure your programs can be complied and executed in banshee (banshee.uow.edu.au).

How to run?

Your programs should run according to the protocol. Host and Client should be executed on different windows. For convenience of marking, please use the local IP: 127.0.0.1 for the submitted version. For simplicity, there is no GUI required in this assignment. That is, messages are simply typed on the window and printed on the receiver’s window. The looping should continue until the moment the user types “exit” to exit.

Describe copyright-public domain and fair use

Briefly describe copyright, public domain, and fair use. Provide a unique example of fair use. Provide an example of when copyright would be violated.

Research Paper Using the practices of Strategic HRM

Research Paper Using the practices of Strategic HRM, complete a APA research paper. Using your text, one or more professional interviews, at least two scholarly resources and other general resources, conduct research on the practices of HRM and the success observed within Caribou Coffee.

Your paper should include:

• Definition and understanding of HRM and all eight principles: HRM practices include: 1. analyzing and designing work 2. determining human resource needs (HR planning) 3. attracting potential employees (recruiting) 4. choosing employees (selection) 5. teaching employees how to perform their jobs and preparing them for the future (training and development) 6. rewarding employees (compensation) 7. evaluating their performance (performance management) 8. Creating a positive work environment (employee relations)

• Select Caribou Coffee for your research. Tell me about the company and outline these principles at work in this organization. Identify what is and is not working within the HR function and compare them to industry standards or best practices that you learn from this course and in your research. Use one of the companies from your text/reading to compare against your selected organization. ? One example for comparison could be to conduct a SWOT analysis on the HRM principles.

• Assess, define and outline your findings of the effectiveness of the three HR business lines: administrative services, business partner services and strategic. Which are being used, which are successful and are they connected to the business strategies of the organization

• Consider your analysis an assessment of the organization and make recommendations on improvements or highlight best practices.

• Conclude your paper with findings and recommendations for improvements as if you were providing business consulting services to the organization.

• This is a minimum 10 page paper using APA writing requirements

Importance of leadership roles-corporate greening

Assessment task: Requires the writing of an academic essay. The essay should be an ‘argumentative essay’, and must therefore contain an argument that is used as the structuring element of the paper. The assignment is based on a discussion piece that highlights a number of points such as the importance of leadership roles relating to corporate greening in creating the sustainable future for the organisation. Students are expected to engage in extensive research within the academic literature relating to leadership and governance.

Effective types of pricing strategies and objectives

• Go to the Interbrand Website, located athttp://www.interbrand.com/en/best-global-brands/2012/Best-Global-Brands-2012-Brand-View.aspx, and make a list on the top 13 best global brands. Be prepared to discuss.

• Use the Internet or the Strayer Library to research articles on local, international, and global brands. Be prepared to discuss.

• View the PowerPoint presentation, titled “Global Pricing”, located at http://www.slideshare.net/kvarun/global-pricing, or use the Internet or the Strayer Library to research articles on a global company, taking note of its pricing strategy. Be prepared to discuss.

DQ 1- “Global Brands” Please respond to the following:

• Each year, the interbrand consultancy compiles a ranking of global brands. From the first e-Activity, compare the top 13 best global brands to the top 13 best global brands for 2010, which are shown in Table 10-2 of your textbook. Select one (1) brand that interests you, and speculate on the main reasons why the rank of this brand you selected changed or did not change.

• From the second e-Activity, select one (1) local brand, one (1) international brand, and one global brand. Compare and contrast the key differences of the products of the three (3) brands you selected, and give your opinion on why they are categorized as local, international, and global.

DQ 2- “Pricing Strategies/Dumping” Please respond to the following:

• Suggest three (3) of the most effective types of pricing strategies and objectives available to global marketers. Provide an example or a scenario of the manner in which each pricing strategy is best used.

• From the third e-Activity, analyze the key reasons why the global company that you chose uses the pricing strategy you identified. Suggest another type of pricing strategy that is more feasible and / or efficient for this company. Provide a rationale to support your suggestion.

Difference between direct and database marketing

1. Explain the difference between direct and database marketing using examples to illustrate.

2. Outline the factors have driven the resurgence of direct marketing in recent years and use examples to illustrate.