IS 433
IT Infrastructure IT 202
Security Attacks and their Solutions
Learning Outcomes: At the end of the assignment, students should be able:
· To learn and identify different categories of network security attacks in LAN and WAN environments.
· To apply specific security solutions for different types of attacks
Types of Attacks
1. DOS & DDOS attacks
· Consume host resources
· Consume bandwidth
· Crashing the victim
· Forcing more computation
2. TCP Layer attacks
· TCP Session Hijacking
· TCP SYN Flooding
· TCP Session Poisoning
3. Routing Attacks (IP Attacks)
· IP fragmentation attack
· IP address spoofing attack
· Traffic amplification attack
4. Application Layer attacks
· DNS spoofing (DNS Cache Poisoning)
· Applications & User authenticity attack
· Search engine poisoning attack
5. ICMP Protocol Attacks (Email attacks)
· No authentication
· ICMP redirect message
· ICMP destination unreachable
· ICMP echo request/reply
Individual Deliverables (Research & Documentation by individual members)
1. Select 1 of the type of attack given above and provide very specific and latest research based solution (countermeasure) for that type of attack and its sub categories.
Notes:
· All sections above should include proper evaluation of alternatives.
· An effort to ensure there is standardization must be indicated in all designs.
· Use appropriate diagrams wherever possible to illustrate your proposals.
Important:
Student will be responsible for researching and documenting certain discrete portions of the assignment. All findings must be shared and discussed and work on the project should be done on a collaborative basis.
Final documentation and discussion of each section is what is expected individually.
Deliverables
Based on the above deliverables, you are required to: -
a. Submit a softcopy of the document indicating each member’s area of responsibility on blackboard.
b. Justification must be provided for each sub category of attack and main attach type. The purpose of this project is to develop your both research based and practical skills in dealing with different LAN WAN types of attacks.
c. You can make assumptions in support of your report, but these assumptions MUST BE STATED.
· Your areas of responsibility must be managed and organized per the deliverables with each member of a group being responsible for one of the deliverables stated above.
· These areas of responsibilities must be provided in a summarized workload matrix and marking matrix, indicating the individual members in the team. This should be inserted at the bottom centre of the cover page of the document. Please Note: Failure to include this matrix on the documentation cover will result in a mark deduction of 10% of the marks.
· Each individual section must use proper citing techniques and have a separate research references list/bibliography etc. at the end of that section
· Your report(s) must combine all the deliverables in one coherent document.
Page 2 of 2