Copyright © XXXXXXXXXXVIT, All Rights Reserved. 1 MITS 5004 IT SECURITY Copyright © XXXXXXXXXX, Victorian Institute of Technology. The contents contained in this document may not be reproduced in any...

IT SECURITY



Copyright © 2015-2018 VIT, All Rights Reserved. 1 MITS 5004 IT SECURITY Copyright © 2015-2018, Victorian Institute of Technology. The contents contained in this document may not be reproduced in any form or by any means, without the written permission of VIT, other than for the purpose for which it has been supplied. VIT and its logo are trademarks of Victorian Institute of Technology. MITS5004 Assignment 2 Copyright © 2015-2018 VIT, All Rights Reserved. 2 Assessment item 2 Assignment - 2 Value: 10% Due date: Submission method options Alternative submission method Task Part A: 30 Marks Answer the following questions: 1. Search the web for news on computer security breaches that occurred during April-August 2015-2018. Research one such reported incident. Prepare a report focusing on what the problem was, how and why it occurred and what are the possible solutions. - 15 Marks Length: Around 800 words 2. Explain why asynchronous I/O activity is a problem with many memory protection schemes, including base/bounds and paging. Suggest a solution to the problem. - 15 Marks Length: Around 600 words Part B: 20 Marks 1. Research the 2011 Sony PlayStation Network outage case on the web and prepare a report focusing on the following questions: • What was the problem? • Who were affected and how? • How was the attack carried out? • What could have been done to prevent the attack? Length: Around 900 words Rationale This assessment task is based on the following topics discussed in the subject: the overview of Information security fundamentals, security threats, cryptography, malicious software and its countermeasures, operating system security and software security . The assessment task is aligned with the following learning outcomes of the subject: On successful completion of this subject, students will • be able to justify security goals and the importance of maintaining the secure computing environment against digital threats; • be able to explain the fundamental concepts of cryptographic algorithms; • be able to examine malicious activities that may affect the security of a computer program and justify the choice of various controls to mitigate threats. • be able to compare and contrast the security mechanisms of a trusted operating system with those used in a general purpose operating system; MITS5004 Assignment 2 Copyright © 2015-2018 VIT, All Rights Reserved. 3 Marking criteria Assessment criteria PART A : 30 marks Assessable Components HD 100% - 85% DI 84% - 75% CR 74% - 65% PS 64% - 50% FL 49% - 0 Q.1 (15 marks) Search the web for news on computer security breaches that occurred during April-August 2015-2018. Research one such reported incident. Prepare a report focusing on what the problem was, how and why it occurred and what are the possible solutions. 1. Comprehensive report addressing all criteria. Evidence of in- depth research. (Value: 95%) 2. Referenced a wide range of appropriate sources. Referencing style correctly used. (Value: 5%) 1. Comprehensive report addressing all criteria. Evidence of in-depth research. Minor omissions only. (Value: 95%) 2. Referenced a range of appropriate sources. Referencing style correctly used. Minor errors only. (Value: 5%) 1. Mostly well- researched and well- presented report addressing all criteria. Some omissions. (Value: 95%) 2. Referenced a range of appropriate sources. Referencing style correctly used. Some errors and omissions. (Value: 5%) 1. Partially complete report addressing most of the criteria. Evidence of research. Some omissions. (Value: 95%) 2. Referenced some appropriate sources. Referencing style mostly correctly used. Some errors and omissions. (Value: 5%) 1. Major omissions or incorrect answers. (Value: 95%) 2. Either no evidence of literature being consulted or cited references irrelevant to the assignment set. Major errors in referencing style. (Value: 5%) Possible marks 15.0 – 12.75 12.6 – 11.25 11.10 – 9.75 9.60 – 7.5 7.35 – 0 Q.2 (15 marks) Explain why asynchronous I/O activity is a problem with many memory protection schemes, including base/bounds and paging. Suggest a solution to the problem. 1. Correct and in depth explanation of the problem. Viable solution provided with complete details. (Value: 95%) 2. Supporting reference/(s); fluent writing style appropriate to assignment with proper in text citation. (Value: 5%) 1. Comprehensive and correct explanation of the problem. Viable solution provided with complete details. Very minor omissions only. (Value: 95%) 2. Supporting reference/(s); fluent writing style appropriate to assignment with proper in text citation. (Value: 5%) 1. Correct explanation of the problem with some details. Viable solution provided. Some omissions. (Value: 95%) 2. Supporting reference/(s); fluent writing style appropriate to assignment with proper in text citation. Minor omissions. (Value: 5%) 1. Mostly correct explanation and solution. Minor errors. (Value: 95%) 2. Supporting reference/(s); writing style appropriate to assignment with proper in text citation. Some omissions. (Value: 5%) 1. Major omissions or incorrect answers. (Value: 95%) 2. Either no evidence of literature being consulted or cited references irrelevant to the assessment set. Major errors in referencing style. (Value: 5%) Possible marks 15.0 – 12.75 12.6 – 11.25 11.10 – 9.75 9.60 – 7.5 7.35 – 0 PART B: 20 marks Q.1 (20 marks) 1. Comprehensive 1. Comprehensive 1. Mostly well- 1. Partially 1. Major MITS5004 Assignment 2 Copyright © 2015-2018 VIT, All Rights Reserved. 4 Research the 2011 Sony PlayStation Network outage case on the web and prepare a report focusing on the following questions: • What was the problem? • Who were affected and how? • How was the attack carried out? • What could have been done to prevent the attack? report addressing all criteria. Evidence of in-depth research. (Value: 95%) 2. Referenced a wide range of appropriate sources. Referencing style correctly used. (Value: 5%) report addressing all criteria. Evidence of in-depth research. Minor omissions only. (Value: 95%) 2. Referenced a range of appropriate sources. Referencing style correctly used. Minor errors only. (Value: 5%) researched and well- presented report addressing all criteria. Some omissions. (Value: 95%) 2. Referenced a range of appropriate sources. Referencing style correctly used. Some errors and omissions. (Value: 5%) complete report addressing most of the criteria. Evidence of research. Some omissions. (Value: 95%) 2. Referenced some appropriate sources. Referencing style mostly correctly used. Some errors and omissions. (Value: 5%) omissions or incorrect answers. (Value: 95%) 2. Either no evidence of literature being consulted or cited references irrelevant to the assignment set. Major errors in referencing style. (Value: 5%) Possible marks 20.0 – 17 16.9 – 15 14.9 – 13 12.9 – 10 9.4 – 0 Presentation • You are recommended to write the answers in a word document and submit. You can also submit your document in pdf format as well. • Your answers to the questions should be precise but complete and informative. • Each question should be answered individually with the corresponding label to indicate the tasks completed e.g. Task 1 a. • A cover page must be included and should contain relevant identifying information.