Cyber Physical Systems Security

DOC-20230410-WA0005..docx

FACULTY OF ENGINEERING AND INFORMATICS

DEPARTMENT OF COMPUTER SCIENCE

COS7051-B Cyber Physical Systems Security Coursework – Marking Scheme

1. Security analysis of CPS systems [20 points]

16-20	Excellent security analysis of CPS. In-depth critical analysis of a variety of solutions, covering all important security concerns.
14-15	Very good security analysis of CPS. Interesting critical analysis of some solutions, covering many important security concerns.
12-13	Good security analysis of CPS, but lacking depth of detail on some security aspects.
10-11	Adequate security analysis of CPS, sufficiently covering some relevant security aspects.
8-9	Limited security analysis of CPS, with various inaccuracies. Limited ability to describe relevant solutions.
6-7	Inadequate security analysis of CPS, with many inaccuracies. Inability to describe valid solutions.
0-5	No meaningful security analysis of CPS.

2. Wireshark analysis [20 points]

16-20	Excellent security analysis. In-depth traffic analysis, covering all important security concerns.
14-15	Very good security analysis. Interesting traffic analysis, covering many important security concerns.
12-13	Good security analysis, but lacking depth of detail on some security aspects.
10-11	Adequate security analysis, sufficiently covering some relevant security aspects.
8-9	Limited security analysis, with various inaccuracies. Inability to answer some questions.
6-7	Inadequate security analysis, with many inaccuracies. Inability to answer many questions.
0-5	No meaningful traffic analysis or answers.

3. Firewalls [20 points]

16-20	Excellent firewall setup and answers. Appropriate use of advanced packet filtering rules.
14-15	Very good firewall setup and answers. Correct and complete packet filtering rules.

12-13	Good firewall setup and answers. Mostly correct and complete packet filtering rules.
10-11	Adequate firewall setup and answers. Some inaccuracies in the definition of the packet filtering rules.
8-9	Limited firewall setup, with various inaccuracies in the definition of the packet filtering rules. Inability to answer some questions.
6-7	Inadequate firewall setup, with many inaccuracies. Inability to answer many questions.
0-5	No meaningful firewall setup or answers.

4. Intrusion detection systems [20 points]

16-20	Excellent use of Snort and definition of IDS rules.
14-15	Very good use of Snort and definition of IDS rules.
12-13	Satisfactory use of Snort and definition of IDS rules.
10-11	Satisfactory use of Snort and definition of IDS rules, with some inaccuracies.
8-9	Limited use of Snort and definition of IDS rules, with various inaccuracies.
6-7	Inadequate use of Snort and incorrect definition of IDS rules.
0-5	No meaningful use of Snort or definition of IDS rules.

5. Virtual private networks [20 points]

16-20	Excellent VPN setup and answers. Appropriate use of advanced VPN functionalities.
14-15	Very good VPN setup and answers. Appropriate use of many relevant VPN functionalities.
12-13	Good VPN setup and answers. Appropriate use of useful VPN functionalities.
10-11	Adequate VPN setup and answers, with some inaccuracies in the process or answers.
8-9	Limited VPN setup, with various inaccuracies in the process. Inability to answer some questions.
6-7	Inadequate VPN setup. Inability to answer many questions.
0-5	No meaningful VPN setup or answers.