NETWORKING ASSIGNMENT

Assessment Details and Submission Guidelines

Unit Code

MN502

Unit Title

Overview of Network Security

Assessment Type

Individual Assessment

Assessment Title

Demonstration of a network security tool

Purpose of the assessment (with ULO Mapping)

a) Discuss common threats and attacks on networked information systems

b) Identify most common intrusion detection attacks, and discuss how to prevent them

c) Apply skills to analyse complex problems in network security under supervision

Weight

15%

Total Marks

20

Word limit

Not Applicable

Due Date

W Week 7

Submission Guidelines

· All work must be submitted on Moodle by the due date along with a completed Assignment Cover Page.

· The assignment must be in MS Word format, 1.5 spacing, 11-pt Calibri (Body) font and 2 cm margins on all four sides of your page with appropriate section headings.

· Reference sources must be cited in the text of the report, and listed appropriately at the end in a reference list using IEEE referencing style.

Extension

· If an extension of time to submit work is required, a Special Consideration Application must be submitted directly to the School's Administration Officer, in Melbourne on Level 6 or in Sydney on Level 7. You must submit this application three working days prior to the due date of the assignment. Further information is available at:

http://www.mit.edu.au/about - mit/institute - publications/policies - procedures - and - guidelines/special considerationdeferment

Academic Misconduct

· Academic Misconduct is a serious offence. Depending on the seriousness of the case, penalties can vary from a written warning or zero marks to exclusion from the course or rescinding the degree. Students should make themselves familiar with the full policy and procedure available at: http://www.mit.edu.au/about-mit/institute-publications/policies-procedures-and-guidelines/Plagiarism-Academic-Misconduct-Policy-Procedure .For further information, please refer to the Academic Integrity Section in your Unit Description.

Student ID:

Student Surname:

Given Name:

Course:

School:

Unit Code:

Unit Title:

Due Date:

Date Submitted:

Campus:

Lecturer:

Tutor:

Academic Misconduct

Academic Misconduct is a serious offence. Depending on the seriousness of the case, penalties can vary from a written warning or zero marks to exclusion from the course or rescinding the degree. Students should make themselves familiar with the full policy and procedure available at: http://www.mit.edu.au/about-mit/institute-publications/policies-procedures-and-guidelines/Plagiarism-Academic-Misconduct-Policy-Procedure .For further information please refer to the Academic Integrity Section in your Unit Description.

Student Declaration

I/We declare that:

· the work contained in this assignment is my/our own work/group work, except where acknowledgement of sources is made;

· certify that this assessment has not been submitted previously for academic credit in this or any other course;

· I/we have read the MIT’s Plagiarism and Academic Misconduct Policy Procedure, and I/we understand the consequences of engaging in plagiarism;

· a copy of the original assignment is retained by me/us and that I/we may be required to submit the original assignment to the Lecturer and/or Unit Co-ordinator upon request;

I/we have not plagiarised the work of others or participated in unauthorised collaboration when preparing this assignment.

Student Signature:

Date:

Student Name:

Serial #

Name of the Software

Description

1

Nmap

map your network and ports with the number one port scanning tool. Nmap now features powerful NSE scripts that can detect vulnerabilities, misconfiguration and security related information around network services. After you have nmap installed be sure to look at the features of the included ncat - its netcat on steroids

2

Metasploit Framework

Test all aspects of your security with an offensive focus. Primarily a penetration testing tool, Metasploit has modules that not only include exploits but also scanning and auditing.

3

OpenSSH

Secure all your traffic between two points by tunnelling insecure protocols through an SSH tunnel. Includes scp providing easy access to copy files securely. Can be used as poor mans VPN for Open Wireless Access points (airports, coffee shops). Tunnel back through your home computer and the traffic is then secured in transit. Access internal network services through SSH tunnels using only one point of access. From Windows, you will probably want to have putty as a client and winscp for copying files. Under Linux just use the command line ssh and scp.

4

BackTrack

an Ubuntu based Linux distribution that is configured with hundreds of security testing tools and scripts. Backtrack is well known with penetration testers and hobbyists alike.

5

Nikto

A web server testing tool that has been kicking around for over 10 years. Nikto is great for firing at a web server to find known vulnerable scripts, configuration mistakes and related security problems. It won't find your XSS and SQL web application bugs, but it does find many things that other tools miss. To get started try the Nikto Tutorial or the online hosted version.

Section to be included in the report

Description of the section

Marks

Introduction

Student should introduce with his/her physical appearance in the video. (2 Marks)

2

Overview

Outline of the whole presentation (3 Marks)

3

Demonstration

Demonstrate (narration of your actions recorded by video) all steps from the respective project (10 Marks)

4*2.5 = 10

Summary

Summarize your findings. (3Marks)

3

Conclusion

With appearance (2 Marks)

2

Total

20