Digital Security - Answer all THREE questions below.

Answer all THREE questions below. You should compile a well-constructed, formal written report of no more than 2,000 words that encompasses industry standard fundamental digital security best practices. The report should be written in the third person. Harvard Referencing.

Formatting

Your work should be spiral or comb bound with the following minimum components:

• Cover Page to include
• Module title
• Course code
• Your Student ID number
• Date of submission
• Table of Contents
• Body of your report (2,000 word guide)
• Any supporting diagrams and tables
• A minimum of 12 references (Harvard reference style)
• An appendix if necessary

Question 1:  Computer Security Principles                                          (25 marks)

You have a new job as Security Manager at Angliabrookes Hospital. Your job involves the detection, prevention and reaction to potential and actual security violations.

The Technology Director has asked you produce a report, using the AAA and CIA models, to explain how the Hospital should protect both administration computers and medical computers from unauthorised access whilst still providing patient access to open area computers. 

Your report should make use of examples and recommend best practice.

Question 2:    Introduction to Cryptography                                        (25 marks)

You have a new job as Information Security Manager at Ruskin City Council, where you are responsible for safeguarding and protecting sensitive and personal information.

The Head of IT has requested a briefing report that explain the benefits of hashing techniques. Using examples from within Council administration departments, explain the difference between the MD5 and AES protocols.

Include an MD5 hash of a text file as an appendix.

Note The text file should be: your tutor, your SID, your university and your degree course

Question 3:    Secure Programming Techniques                                (25 marks)

You have a new job as Software Security Specialist at Ruskin City Council. Your job involves the prevention and mitigation of software security violations.

The Head of Development has asked for a briefing report for your fellow software developers, which outlines some programming techniques they should use to defend against software vulnerabilities, as well as your rationale for these suggestions.

From the OWASP top 10 vulnerabilities, identify three different attacks that Council software applications might be vulnerable to. Outline why these three vulnerabilities occurs and suggest mitigation techniques to prevent an attack occurring in the first place.