Security of Operating Systems and Networks – Individual Assignment
This individual assignment focuses on the security of operating systems and computer networks. Students are required to produce a professional technical report of approximately 2,000 words demonstrating a deep and systematic understanding of operating-system security, networking functions, security threats, vulnerabilities and practical security testing. The assessment carries 50% and forms 100% of the module assessment. Students are expected to support their work with appropriate technical evidence, images showing practical steps and relevant sources. The assignment uses a business scenario involving Net-Tech, a small and medium-sized technology-services enterprise. The organisation is concerned about the security of its proposed system, including operating-system attacks such as buffer overflow and network threats such as hacking and phishing. Students are required to investigate, design and experiment with the features and functions of a web server used to serve the company's website, while assessing the security landscape and presenting findings that can support appropriate organisational security decisions. As part of the practical work, students must create a prototype Net-Tech network test rig. This includes creating two users, with one configured as a superuser and another as a standard user, applying appropriate baseline security measures, installing suitable software and identifying vulnerabilities, using appropriate tools to conduct security tests, and writing scripts to automate repetitive tasks. Students must document assumptions and parameters used within the project, including further security implementations and recommendations such as the use of a suitable database for a database-driven website. The report is structured around introduction, background research, pre-engagement, engagement and post-engagement activities. The introduction should explain the business scenario, assumptions, aims, objectives, deliverables, available skills and resources, constraints and project plan. The background research should address common vulnerabilities, threats, risk models, security-testing approaches, relevant attack and testing tools, legal and organisational requirements, and ethical, social, professional and sustainability considerations. The pre-engagement section covers the test-rig setup and testing strategy. The engagement section requires practical comparison and demonstration of operating-system and network security, including user authentication, file and directory permissions, protection against stack-overflow attacks, network weaknesses, operating-system discovery, firewalls, listening ports, network statistics, prevention of denial-of-service attacks and scripting for automation. The post-engagement section requires a summary of the work, deductions and limitations, mitigation measures and recommendations, and personal reflection. The assessment requires students to use relevant sources, provide a bibliography and demonstrate appropriate analysis, evaluation and reflection. The assignment is designed to assess learning outcomes relating to knowledge of network security threats and the development of complex software and scripts relevant to operating systems and computer networks.
Read Model Answer →