Security of Operating Systems and Networks
This individual assignment for the Operating Systems and Networks module focuses on the security of operating systems and computer networks within a business environment. The assessment requires students to produce a professional technical report of approximately 2,000 words, supported by appropriate images demonstrating practical steps and testing activities. The assignment assesses students' knowledge and understanding of operating system and network security threats, vulnerabilities, testing approaches and practical security solutions. It also addresses the ability to develop and write complex scripts to solve problems relating to operating systems and computer networks. The assignment is based on a business scenario involving Net-Tech, a small and medium-sized technology-services enterprise. The organisation is developing a web server to provide its website to customers and is concerned about the security of the proposed system. Key concerns include operating system attacks such as buffer overflow attacks, as well as network threats involving hackers and phishing. Students are required to investigate, design and experiment with the features and functions of a web server and assess the security landscape so that appropriate security requirements can be identified. As part of the practical work, students must create a prototype Net-Tech network test rig. This involves creating two users, including a superuser and a standard user, applying appropriate baseline security, installing relevant software and security tools, conducting security tests and writing scripts to automate repetitive tasks. Students must document assumptions and parameters used in their implementation and may also make recommendations for further security measures and database-driven website functionality. The report covers several stages of the security assessment. The introduction establishes the business scenario, assumptions, aims, objectives, deliverables, available skills and resources, constraints and project scope. The background research examines common vulnerabilities, security threats, risk models, testing approaches and attack or testing tools, together with relevant legal, organisational, ethical, social and professional considerations. The pre-engagement stage focuses on setting up a suitable Linux or Kali Linux testing environment and developing a justified test plan. The engagement stage requires practical investigation of operating-system and network security. Areas include user authentication, file and directory permissions, protection against stack overflow attacks, network weaknesses, operating-system discovery, firewall configuration, listening ports, network statistics, denial-of-service prevention and script-based automation. The final post-engagement section requires students to summarise their work, identify deductions and limitations, propose mitigation measures and recommendations, and provide a self-reflection. The assessment is aligned with learning outcomes relating to understanding network security threats and developing software or scripts to solve problems in operating systems and computer networks. Students are expected to use relevant sources, reference them appropriately and include a bibliography. Practical tools such as Wireshark are specifically identified in the assignment brief, and the work should demonstrate appropriate testing methodology and security practices.
Read Model Answer →