Developing a security program for the employees

/in /by

Assume you are a recently hired Information Systems director at a large medical center. You realize that there are a number of employees whose job duties would allow them to work from home. Because your boss has asked you for a space reduction proposal, there is need to implement a work-at-home program for employees

a) What steps should you take in developing a security program for the employees who will work from home?

b) Identify security threats that can occur during electronic transmission of data and how you could mitigate

Sample Solution

The post Developing a security program for the employees appeared first on homework handlers.

Wireshack question networking | Computer Science homework help

/in /by

 

ITECH1003/ITECH5003 Networking Assignment

Wireshark Capture Filter assignment

This assignment requires students to:

· Become familiar with Wireshark capture filters.

· Document the qualifiers used in capture filters.

· Construct and use capture filters to capture specific network traffic.

· Include screen shots of captured network traffic and present them with associated discussion.

Part 1 – Wireshark and traffic capture basics

Describe what the term promiscuous mode means in relation to capturing network traffic with Wireshark and similar network traffic analysers.

[ 1 mark ]

The Capture > Options dialog allows the Name Resolution of Network Layer names. Describe what this means and describe how it could be used for capturing network traffic.

[ 1 mark ]

Describe the difference between a network switch and a network hub. Then explain how switched networks limit the network traffic that is visible to Wireshark in comparison to networks that used hubs. (Note – switches are the technology used in today’s computer networks)

[ 2 marks ]

In TCP/IP networking IP addresses are used to identify specific computers (or hosts) on the network, clients use ports numbers to specify a particular instance of a client program (for example a specific tab on a web browser) and servers normally use well known port numbers  on which to listen for client requests. For instance ftp at the server uses ports 20 and 21.

From the web or any other source determine the well-known port numbers of the following server programs:

· ftp data

· ftp control

· http

· NTP

· ssh

Also find the well know port numbers for 6 other network protocols and describe the function that each protocol performs.

[ 2 marks ]

Part 2 : Capture filters 

In this section of the assignment you are required to learn the syntax for creating Wireshark Capture Filters. Then document and use capture filters to capture specific network traffic.

Discussion of Berkeley Packet Filter (BPF) syntax

The following discussion gives a brief explanation of the BPF syntax to help you get started with constructing your own capture filters.

Wireshark capture filters use the Berkeley Packet Filter (BPF) syntax to specify particular traffic. This syntax is used by the libpcap (in Unix/Linux) and Winpcap (in Windows) libraries that are used by Wireshark to capture network traffic. 

Note – WinDump is the Windows version of a Linux/Unix program called TCPDump and hence TCPDump documentation applies to capture filter syntax as used on Windows machines.

Syntax

The BPF syntax consists of one or more Primitives that specify a particular type of traffic to capture.

Some examples of simple primitives are shown below:

(i) host 192.168.12.22

(ii) host google.com

(iii) src host google.com

(iv) tcp port 80

Things to note about these primitives:

· Primitives start with one or more qualifiers (eg. host, src host, dst host etc.)

· Primitives end with an ID (eg. 192.168.12.22, google.com, 80 etc.)

Note –  If you use named IDs like google.com then you need to enable name resolution in the capture filter dialog box when specifying capture filters.

In summary a capture filter consists of one or more primitives and those primitives consist of one or more qualifiers followed by an ID.

{ <——- primitive ——> } { operator } { <- primitive -> }

dst host 192.168.12.13 && tcp port 80

The references dst, host, tcp and port are called qualifiers.

The references 192.168.12.13 and 80 are called ID’s.

The boxed example above also shows the AND operator being used to join two primitives to make a capture filter expression. The AND operator is one of the three possible operators that are allowed in capture filters, the other two are OR and  NOT.

Sources of documentation of the Berkeley Filter Syntax that you should refer to are:

Documentation that describes the BPF syntax can be found at https://www.winpcap.org/docs/docs_40_2/html/group__language.html 

There are also good cheat sheets for TCPDump (Wireshark Capture Filters) and Wireshark Display filters at: http://packetlife.net/library/cheat-sheets/

The Wireshark Users Guide (Access from Help in Wireshark)

End of discussion of BPF syntax

Documenting BPF qualifier syntax

There are three types of BPF qualifiers:

· Type (3)

· Dir (2)

· Proto (8)

The Type qualifier has three possible options: host, net  and port. The other two qualifier types also have associated options, there are 4 options associated with Dir qualifier type and 8 options associated with Proto qualifier type (please disregard the fddi, decnet options as they are seldom used in today’s networks).

You are required to describe what each qualifier means and list a total of 10 capture filter examples that incorporate at least 1 qualifier and one ID, and explain how each capture filter works.

[ 3 marks ]

Documenting the 3 logical operators for combining primitives

The boxed example above show the logical AND operator ( && ) being used to combine two primitives. There are two other such logical operators.

Document all three logical operators and give one example of how each could be used in a capture filter.

[ 1 mark ]

Implementing BPF capture filters

In this section of the assignment you are required to create a range of capture filters, implement those capture filters in Wireshark and take a screenshot of associated captured traffic.

Your screen captures must include the Time, Source, Destination and Protocol fields of the Wireshark display along with at least two packets (the graphic below shows three, packets 7,8 & 9). 

Because the Time field is displayed to such a fine resolution your screenshot capture will be unique from all other students doing this assignment. This will therefore act as an automatic plagiarism detector.

After creating an appropriate capture filter you may need to generate appropriate traffic for Wireshark to capture. For instance, if you create a Capture Filter to capture ftp traffic you will need to run an ftp client to effect the traffic capture. Likewise, when capturing web traffic you could use a browser to generate appropriate traffic. To capture ICMP traffic you might use the ping command because it uses the ICMP protocol to query other hosts.

Example capture filter:

Filter requirements

Capture all traffic between your computer (that is running Wireshark) and the Google search engine in response to the query “caviar” being entered.

Procedure:

Open a browser to www.google.com

From the Wireshark interface select:

Capture > Options >

Select the desired interface (or select all interfaces)

Enter host google.com in the capture filter entry area

Select the display option Resolve network layer names

Start the capture

Then enter the word caviar into the google query field of the browser

Wireshark will captures the require traffic.

Note –  Make sure you have selected the correct network interface, or select all interfaces if you are unsure.

Capturing traffic from/to another machine (2 marks)

In network analysis you will frequently need to capture all traffic or specific traffic between your machine that is running Wireshark and another specified machine.

For this exercise you should generate traffic between the machines with the ping command.

Create capture filters that will:

1. Capture all traffic between your machine (the one running Wireshark) and another machine. Use the IP address of the other machine to identify it in the filter.

2. Capture all traffic between your machine (the one running Wireshark) and another machine. Use the MAC address of the other machine to identify it.

3. Capture all traffic from the other machine. Use either the IP or MAC address of the remote machine to identify it.

4. Capture only ICMP traffic between the two machines

Your discussion for this section should:

· include two screenshots

· list all capture filters you used

· describe how each capture filter works.

Excluding particular network traffic (2 marks)

Create a set of capture filters that will:

· Capture broadcast traffic only

· Exclude broadcast traffic

· Capture all traffic from a range of network addresses but exclude broadcast traffic

Briefly discuss how each capture filter works.

Using port numbers in capture filters (1 mark)

Create capture filters that will capture the following types of network traffic:

1. DNS traffic

2. DNS traffic being sent from your machine

3. DHCP traffic in either direction

Briefly discuss how each capture filter works.

Challenge exercise (zero marks)

The BPF syntax can detect specific content at specific offsets from the start of network packets.

An example of such syntax would be tcp[13] & 4 == 4

This particular capture filter can detect TCP packets that have the RST flag set.

Describe this syntax so that a layman could understand how such filters work.

Marking Criteria

This assignment is worth 15% of ITECH1003 assessment.

The assignment must be submitted before the due date/time to ensure assessment penalties as stipulated in the course description are not applied.

The marks for each section are shown against each requirement above.

Students are required to demonstrate their understanding of each part of the assignment clearly and concisely and if specified include associated Wireshark screenshots and clear discussion to demonstrate you have fully understood the topic.

Students should realise that any screenshot taken by them will be unique by virtue of Wireshark’s precise time display, hence if identical screenshots appear in two separate assignments then it will be immediately identified as plagiarism. Therefore, all students need to interact with Wireshark to capture their own traffic and ensure that no other student has access to their screenshot files.

All screen captures that you use in the assignment report must include the Time, Source, Destination and Protocol fields of the Wireshark display along with at least two network packets as outlined on page 3 of this assignment specification.

Please acknowledge by way of referencing, if you have used information from books, papers, websites and other published and unpublished materials. 

Students should submit their completed report as a single word or pdf document to Moodle by the due date as specified on your ITECH1003 course description.

Describe how a consumer’s attitudes and beliefs about CAM could hinder objective assessments of reliability and credibility in CAM

/in /by

Create a 10- to 12-slide Microsoft® PowerPoint® presentation on a methodology you create for assessing credibility and reliability of an Internet source of CAM information. Include detailed speaker notes and reference citations.
Describe how a consumer’s attitudes and beliefs about CAM could hinder objective assessments of reliability and credibility in CAM.
Create five objective criteria to judge the credibility and reliability of a source of information on CAM.
Select a CAM therapy or modality, and research the Internet for websites on this therapy or modality. Be sure to not use the same therapy you used for the CAM paper. Then, perform the following: 

Describe the therapy.
Examine the type of training or education that is required.
Discuss whether a license or certification is required to practice this therapy.
Identify the overseeing or regulating organization for this therapy.

Using your criteria, review one of the websites and determine how reliable the site is for CAM information.

Explain how you reached your conclusion about the website. Consider using a grading scale or grid for this exercise.
Describe steps the website could take to increase its credibility.

Present the Assessing Reliability and Credibility of CAM ResourcesPresentation.
 

For Local Campus students, these may be (at the discretion of faculty) oral presentations accompanied by Microsoft® PowerPoint® presentations.
For Online and Directed Study students, these are Microsoft® PowerPoint® presentations with speaker notes. 

NB: We do not resell papers. Upon ordering, we do an original paper exclusively for you.

Project 2 | English homework help

/in /by

Scenario (Draws from scenarios presented in Mike Markel’s Ethics in Technical Communication: A Critique and Synthesis, and Lori Allen and Dan Voss’s Ethics in Technical Communication: Shades of Gray)

 

Crescent Petroleum, an oil-refining corporation based in Riyadh, Saudi Arabia, has issued a request for proposals for constructing an intranet that will link its headquarters with its three facilities in the United States and Europe. Rivera Informatics, a networking consulting company in Miami, is considering responding with a proposal. If hired, most of Rivera Informatics’ work will be performed at the Crescent Petroleum headquarters in Riyadh.

Crescent Petroleum was established 40 years ago by family members who are related by marriage to the Saudi royal family. At the company headquarters, the support staff and clerical staff include women, who are mostly related to the owners of the company. The professional, managerial, and executive staff is all male, which is traditional in Saudi corporations. Crescent is a large company, with revenues in the billions of dollars.

You are the technical writer for Rivera Informatics, a small Information Technology firm of 12 employees established two years ago by Denise Rivera, a 29-year-old computer scientist with a master’s degree in computer engineering. She is working on her MBA while getting her company off the ground. Her employees include both males and females at all levels. The chief financial officer and several of the professional staff are female.

Looking to gather the information you need for composing a proposal, you travel with Denise to New York to attend a briefing by Crescent. When you arrive, you find that all the representatives from Crescent are middle-aged Saudi men. Denise is also the only female among the representatives of the seven companies that attend the briefing. When Denise shook hands with Mr. Fayed, the Crescent team leader, he smiled and nodded as he did when greeting the other venders.

Still, during the break, Mr. Fayed and his team spent more time speaking with the men from the other six vendors, sometimes leaving you and Denise to stand awkwardly by yourselves. When alone, Denise confided that she got the impression that the Crescent representatives feel uncomfortable in her presence.

On your flight back to Miami, Denise discussed the possibility of gender discrimination but decided to bid on the project because she believes your company could write a persuasive proposal. Rivera Informatics had done several projects of this type successfully in the last year. Though Crescent would be, by far, the most lucrative contract yet.

You wrote the proposal and sent the first draft to Denise for her feedback. She sent the proposal back to you with the following comments and directed revisions:

  • “Everyone’s going to be proposing a six month estimate on this project. Let’s make ours five months to stand out. If we can’t get it done in five, we’ll just explain the delay then.”
  • “I like all the detail about our strategies to eliminate security breaches to the intranet. But you also literally state at the end of that section that ‘any system can be compromised’! Get rid of that.”
  • “The section with information about our company has information about me founding the company and being president. You also included the resumes of the project team, many of whom are women. I’m wondering if Crescent may not like the idea of women in positions of power over the project. Can you revise the boilerplate to remove information about me? Also, change the names on the resumes to only initials.
  • “I like the idea of using Mark Weinstein as principal investigator on the team, but I’m wondering if Crescent might be uncomfortable with Mark’s religious beliefs, since there’s a lot of conflict in that are of the world between people of Jewish and Muslim faith. Maybe you can change Mark’s name to include only initials too. Though maybe we’d be better off bringing in a different principal investigator on the project to be safe…what do you think?”

 

You consider each of the directed changes and decide you don’t feel comfortable making them. Either some or all these revisions strike you as unethical. Unfortunately, Rivera Informatics does not have a code of conduct to provide guidance.

You look at the pile of work on your desk, the mass of emails in your inbox, at the clock reading 4:30pm, and at the empty bottle of Dayquil by your mouse. You take a deep breath, shake your head, and resolve that careful consideration of the dilemma is required. Once you have clarified the unethical nature of the directed changes, you will compose an email to Denise making your argument against them.

THE ASSIGNMENT: ETHICS EMAIL

Compose an email persuading Denise Rivera, president and founder of Rivera Informatics, that it is in her best interest, and that of her company, to omit some or all of her directed revisions because they would be unethical. Remember to use appropriate tone–she is your boss, not the other way around.  Also, it’s totally okay to offer alternative suggestions–to be helpful instead of merely critical. 

Though you’ll write your email in a Word document, you should create a header that looks like an email with an appropriate subject line. You’ll also want to create a signature that reflects your position at the company. 

Make sure to organize your responses in a way that is easy to follow–Denise gets lots of emails everyday and she’ll need to be able to understand your answer without rereading her email to you. You can revisit the chapter on email etiquette here

https://open.lib.umn.edu/businesscommunication/chapter/9-1-text-e-mail-and-netiquette/
 (Links to an external site.)

Be especially careful of tone: you want Denise to understand what you will and will not change in the proposal you wrote without offending your boss.  Since she’s your audience, you also want to convince her to get her on board with your choices. 

 

Here’s how you’ll be graded: 

  • Is the email well written and free of grammatical and proofreading errors? (5 points)
  • Does the writer follow effective email formatting? For example, is there a specific subject line, a salutation and a signature? Does the email follow good principles for email writing set forth in the textbook? (10 points)
  • Does the writer make effective choices for appropriate tone in formal technical/business writing? For example, does the student use effective word choice, avoid overly negative language, and make appropriate decisions about organization of information (especially as it regards to managing tone)? (10 points)
  • Is the email well organized and easy to follow? Does the email use effective topic sentences? (10 points)
  • Does the writer suggest ethical choices for their boss, with reasons to support their recommendations? (5 points)