Evaluate the students ability to research – Software Engineering
Government Proposal Undertaking
The aim of this challenge is to consider the pupil’s ability to research and consider safety testing software program and current a proposal for evaluate by government staff members. By finishing the doc the pupil may also acquire sensible data of the safety analysis documentation and proposal writing course of. The challenge will allow the pupil to determine and perceive the required requirements in observe, in addition to the particulars that ought to be coated inside a proposal.
Undertaking Deliverable
· Utilizing the Case Examine introduced on this doc, to full an government proposal.
· Present a 3 to 5 web page proposal summarizing objective and advantage of chosen safety software program to the government administration staff.
· The scholar will consider and take a look at safety testing software program for functions of testing company community safety. The aim of the software program is to measure the safety posture of the group by figuring out vulnerabilities and Help stop future assaults and deter any actual-time unknown threats.
· The proposal ought to successfully describe the software program in a fashion that can permit the government staff members to perceive the objective and advantages of the software program to approve buy.
Tips
· Evaluate and choose a safety software for suggestion that you just realized about in the iLabs modules or the EC-Council textual content books.
· The proposal doc have to be three to 5 pages lengthy, conforming to APA requirements. See “Writing Guideline” in WebTycho the place you will discover Helpance on writing for research tasks.
· At the very least three authoritative, outdoors references are required (nameless authors or internet pages should not acceptable). These ought to be listed on the final web page titled “References.”
· Acceptable citations are required. See the syllabus concerning plagiarism insurance policies.
· This can be graded on high quality of research subject, high quality of paper info, use of citations, grammar and sentence construction, and creativity.
· The paper is due throughout Week 7 of this course.
Undertaking Description
The aim of challenge is to write an government proposal for a fictitious firm referred to as Superior Research. The purpose of the proposal is to persuade the government administration staff to approve buy of safety testing software program that may profit the firm’s company community safety by testing and figuring out vulnerabilities earlier than they’re exploited by hackers. The proposal should embody an in depth description of the software program, its objective and advantages.
Steered Strategy
Research a safety testing software program software that you just practiced utilizing in the EC-Council iLabs or from the textbook.
Decide whether or not the software can be useful in testing the safety of a company community.
Use the vendor’s web site to accumulate crucial details about the software to give you the option to clarify its objective and profit.
Embrace third celebration endorsements and case research about the software.
Combine the info from your personal expertise with the software into your proposal. This may increasingly embody outcomes from the iLab workouts or your personal take a look at lab.
Firm Description
Superior Research Company
Superior Research is a startup medical research and growth firm. After 5 years of extraordinary success in the growth of revolutionary medical and pharmaceutical merchandise, Superior Research is on its method to changing into a significant participant in the medical research and growth business. Nonetheless, due to its success, Superior Research has additionally develop into a significant goal of cybercriminals. Superior Research has been the sufferer of cybercriminal makes an attempt to steal mental property and promote it to Superior Research’s opponents. It’s suspected that the company community has been infiltrated from unauthorized sources greater than as soon as. In 2011, Superior Research was falsely accused of unethical research and growth practices. The false allegations resulted in the defacement of Superior Research’s public web site and a number of other Denial of Service assaults at totally different instances over a 9 month interval that introduced the company community to its knees. These assaults had a significant influence on Superior Research’s ability to conduct enterprise and resulted in undesirable publicity for the firm.
No matter its safety issues, Superior Research has continued to develop as an organization. Its research and growth departments have grown over the years, due to the growth of the firm, in proportion to the improve in its enterprise making up over 40% of the human sources. Superior Research’s revolutionary research and growth info is paramount to its continued success as an organization. Though, no recognized assaults have occurred in final 18 months, the safety of its community and mental property remains to be a significant concern for the firm. As a result of Superior Research is a nonetheless pretty younger firm, administration has been hesitant to funds for costly safety tasks. Nonetheless, this viewpoint is starting to change. Notably, as a result of certainly one of Superior Research’s opponents, a significant participant in the medical research and growth business for over 40 years, skilled a lack of a whole bunch of thousands and thousands of in research knowledge that was stolen from its company community by cyber thieves.
Background and your function
You might be the IT Supervisor employed in 2012 to handle the bodily and operational safety of Superior Research’s company info system.You perceive info safety points higher than anybody else in the firm. You additionally know that the community is susceptible to outdoors threats as a result of it has skilled assaults in the previous and since you have not had the sources to correctly take a look at the company info system to determine the vulnerabilities that may exist and take motion stop attainable assaults. You could have a duty to deliver these considerations to the consideration of the government staff and ask for approval to buy the crucial testing software program.
Your schooling and coaching have launched you to number of safety instruments for testing pc and community safety. Nearly all of these instruments you both solely examine or have practiced utilizing in lab surroundings. You could have determined to research a few of these instruments and take a look at them out in your personal lab surroundings and select one for suggestion to government staff.
You will want to current info that proves the chosen software can be useful to the safety of company info system. To perform this you will have to research the product, if attainable, take a look at the product in a digital lab surroundings. If the software is a part of your iLab train, it’s endorsed that you just observe utilizing and testing the software past the scope of the lab train. Primarily based in your research and Assessment, you’ll embody this info in your proposal in method that the government employees can perceive and permitting them to make an knowledgeable determination to approve buy of the product.
The manager administration staff of Superior Research:
The proposal ought to embody:
· Detailed description of the software program and advantages.
· Embrace opinions, case research and buyer suggestions
· Embrace your personal palms-on expertise with the software and take a look at outcomes
· Value of product. Embrace further prices similar to coaching or software program that could be wanted so as to correctly deploy handle and keep the software program.
· How will the software program influence the manufacturing surroundings? For instance, the software program could take a look at for Denial of Service assaults. You want to clarify any interruptions the take a look at could have on enterprise operations. You want to justify the want for such a take a look at. Additionally clarify how to you intend to reduce or stop attainable manufacturing outages.
The software program ought to take a look at for a number of of the following varieties of assaults:
· Denial of Service (DoS)
· Cross Website Scripting (XSS)
· Authentication Bypass
· Listing Traversal
· Session Administration
· SQL injection
· Database Assaults
· Password Assaults
· Firewall/Router Assaults
· Working System Assaults
Company Workplace Community Topology
The Superior Research foremost research and growth facility is situated in Reston Virginia. You could have considerations about the delicate info that’s saved at this location in addition to knowledge that transmitted over the WAN to Superior Research’s New York Metropolis headquarters location, enterprise companions and purchasers. The Reston facility can be the place the Superior Research knowledge heart is situated. The information heart is the place Superior Research’s public web site, e mail, databases and company intranet are hosted. The surroundings accommodates a mixture of Microsoft and *NIX applied sciences.
· 45 Home windows 2008 Servers
· 13 Home windows 2003 Servers
· 15 UNIX Servers
· 2200 Home windows XP and seven Desktops
· Internet Servers: Apache and IIS
· Providers: FTP, SMTP, DNS, DHCP, VPN
· Database: SQL, Oracle and MySQL
· Community: Cisco Routers and Firewalls
