Assessment
Description <\/p>\n
\u00a0 <\/p>\n
Answer all the questions below. You
should compile a well-constructed, formally written report of no more
than\u00a02,000 words\u00a0that encompasses industry standards and
fundamental digital security best practices. The assignment will specify a
different scenario on which to base the context of your answers. <\/p>\n
Whilst your target audience has some
level of IT knowledge, they have employed you as the subject expert. Answers to
each question should be provided at a level of technical detail sufficient to
that target audience in the given scenario. You should apply the knowledge
gained from the\u00a0lectures, and complement this with your\u00a0own
research\u00a0in order to demonstrate an understanding of the subject
material, explaining the technology and how it applies to the context of the
given scenario, providing suitable examples where appropriate. <\/p>\n
\u00a0 <\/p>\n
\u00a0Question 1: Computer Misuse
Act (15 Out of 100) [ ~ 400 words] <\/p>\n
\u00a0 <\/p>\n
You have just started a new job
at\u00a0Ruskin University\u00a0as a security specialist.\u00a0Ruskin
University\u00a0has established a new branch in Ipswich and has hired
over 200 new members of academic and non-academic staff. The new members of
staff are hired from different countries with different backgrounds, rules,
regulations, and security practices. This raises concerns about the security
awareness of the new personnel and their understanding of digital offences in
the United Kingdom.\u00a0 As your first task, you have been asked to promote
the security awareness of your new colleagues by creating an educational
brochure that outlines the UK Computer Misuse Act 1990. <\/p>\n
Your brochure should include the
following: <\/p>\n
Various computer misuse offences under
CMA with extensive details and examples related to the\u00a0university
environment. Details of each offence must be adopted and
reinterpreted for the university environment. <\/p>\n
Jurisdiction for computer misuse offences
under misuse Act. <\/p>\n
IMPORTANT: Your solution must be adapted to
the\u00a0university environment\u00a0and use cases. <\/p>\n
\u00a0 <\/p>\n
Question 2: Risk
Assessment (15 Out of 100) [~ 400 words] <\/p>\n
\u00a0 <\/p>\n
You have been asked to conduct
both\u00a0quantitative\u00a0and\u00a0qualitative\u00a0risk
assessments for\u00a0Ruskin University. Describe the steps that
you must take to conduct risk assessment. Use the following imaginary network
topology as a baseline to estimate the\u00a0Ruskin University\u00a0digital
assets (hardware, software) and their average monetary values. Try to
identify\u00a0THREE\u00a0security threats\u00a0that might
be critical to Ruskin University digital assets. Form your\u00a0quantitative\u00a0and\u00a0qualitative\u00a0risk
assessment based on those\u00a0security threats\u00a0and offer
mitigation plans for each.\u00a0\u00a0\u00a0 <\/p>\n
\u00a0 <\/p>\n
Figure 1:\u00a0Ruskin University Network Topology <\/p>\n
\u00a0 <\/p>\n
Question 3:
Cryptography (20 Out of 100)\u00a0 [ ~ 400 words] <\/p>\n
\u00a0 <\/p>\n
At Ruskin University, you are
responsible for safeguarding and protecting the sensitive and personal
information of students and staff. <\/p>\n
3.1\u00a0Outline how and where\u00a0symmetric\u00a0and\u00a0asymmetric\u00a0cryptography
can contribute to the security of communications at Ruskin University? (Your
solution must be technical, and it should be adopted to the University
environment and use cases. \u00a0Elaborate your solution with examples, provide
a comparison if required). \u00a0 <\/p>\n
3.2\u00a0Outline the possible\u00a0risks\u00a0and\u00a0attacks\u00a0that
can be mitigated through various cryptographic frameworks? \u00a0(Your solution
must be technical, and it should be adopted to the University environment and
use cases. Elaborate your solution with examples). <\/p>\n
\u00a0 <\/p>\n
3.3\u00a0Outline how\u00a0PKI\u00a0and\u00a0Digital
Certificates\u00a0contribute to the security of the communications at
Ruskin University? (Your solution must be technical, and it should be adopted
to the University environment and use cases. Elaborate your solution with
examples). <\/p>\n
3.4\u00a0Outline how your solutions at 3.1, 3.2, 3.3
delivers\u00a0CIA\u00a0and\u00a0AAA\u00a0framework? <\/p>\n
\u00a0 <\/p>\n
Question 4:
Incident Response Plan (15 Out of 100)\u00a0 [ ~ 400 words] <\/p>\n
\u00a0 <\/p>\n
You have been asked to develop
an\u00a0Incident Response Plan\u00a0for the\u00a0Ruskin
University\u00a0to protect the university assets and safeguard business
continuity in the case of a disaster, cyber-attack, or critical failure.
Elaborate your solution based on the\u00a0NIST\u2019s\u00a0Computer
Security\u00a0Incident Response lifecycle. \u00a0\u00a0\u00a0 <\/p>\n
NIST\u2019s\u00a0computer security incident handling
guide can be found here: <\/p>\n
https:\/\/nvlpubs.nist.gov\/nistpubs\/SpecialPublications\/NIST.SP.800-61r2.pdf\u00a0(Links
to an external site.) <\/p>\n
IMPORTANT:\u00a0Your solution must be technical, and it
should be adopted to the university environment and use cases. Elaborate your
solution with examples. <\/p>\n
\u00a0 <\/p>\n
Question 5: OWASP
Secure Coding (15 Out of 100)\u00a0 [ ~ 400 words] <\/p>\n
You have switched your job and now you
are working as a\u00a0security specialist\u00a0in a software
development company. Your company has recently signed a new contract with\u00a0Anglia
Council\u00a0to develop a new highly secure cloud-based office
management\/accounting software system capable to handle highly confidential
resident information, financial transactions, and their tax records. The system
should allow residents to log-in to the system, upload and download documents,
fill up online forms, contact consultants, and make online payments.
\u00a0\u00a0\u00a0\u00a0 <\/p>\n
\u00a0 <\/p>\n
\u00a0 <\/p>\n
Your first task is to make sure all
developments in this project are secure and meet software security principles
and guidelines.\u00a0\u00a0 <\/p>\n
Create a secure coding checklist for the
various component of the office management\/accounting software by adopting
the OWASP secure coding practices. Provide case-study related descriptions
and examples. You can find the OWASP secure coding practices here: <\/p>\n
https:\/\/owasp.org\/www-pdf-archive\/OWASP_SCP_Quick_Reference_Guide_v2.pdf\u00a0(Links
to an external site.) <\/p>\n
Using the OWASP Top 10 security risks,
identify five different attacks that office management\/accounting software
might be vulnerable against. Provide case-study related descriptions and
examples. You can find the OWASP top 10 security concerns here: <\/p>\n
https:\/\/owasp.org\/www-project-top-ten\/ <\/p>\n
\u00a0 <\/p>\n","protected":false},"excerpt":{"rendered":"
Assessment Description \u00a0 Answer all the questions below. You should compile a well-constructed, formally written report of no more than\u00a02,000 words\u00a0that encompasses industry standards and fundamental digital security best practices. The assignment will specify a different scenario on which to base the context of your answers. Whilst your target audience has some level of IT […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[28],"class_list":["post-43074","post","type-post","status-publish","format-standard","hentry","category-research-paper-writing","tag-computer-science"],"_links":{"self":[{"href":"https:\/\/papersspot.com\/blog\/wp-json\/wp\/v2\/posts\/43074","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/papersspot.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/papersspot.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/papersspot.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/papersspot.com\/blog\/wp-json\/wp\/v2\/comments?post=43074"}],"version-history":[{"count":0,"href":"https:\/\/papersspot.com\/blog\/wp-json\/wp\/v2\/posts\/43074\/revisions"}],"wp:attachment":[{"href":"https:\/\/papersspot.com\/blog\/wp-json\/wp\/v2\/media?parent=43074"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/papersspot.com\/blog\/wp-json\/wp\/v2\/categories?post=43074"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/papersspot.com\/blog\/wp-json\/wp\/v2\/tags?post=43074"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}