Scenario: Student Grading System Security Remarkable University is implementing a new student grading system. The system needs to be developed and implemented to ensure that it is both fit for purpose...

1 | P a g e

Assignment
On

IT Security plan for Student grading system
Submitted by:-
Date:-
Registration No:-
2 | P a g e

Contents
Introduction:- .......................................................................................................................................... 2
Scope:- .................................................................................................................................................... 2
Risk assessment:- .................................................................................................................................... 3
Security strategies and action:- .............................................................................................................. 3
Residual risks:- ........................................................................................................................................ 6
Maintenance and training:- .................................................................................................................... 6
Revision history-:- ................................................................................................................................... 7
Conclusion:- ............................................................................................................................................ 7
References .............................................................................................................................................. 7
Introduction:-
The aim of this assignment is to develop an IT security plan for student grading system which
is about to be implemented by Remarkable university. Goal of the project is to make the
system secure from identified threats. Some autonomous attacks in the server are phishing
attacks, targeted exploit attempts, etc.
Scope:-
There are two major situations where hacking activities can be performed, and that are,
(1) When student want to access or modify their results or others.
(2) When internal users or staffs want to view or modify their results.
(3) When external users want to access their information as well as want to modify their
results.
The important way to protect the system is to protect the two components of the grading
system. One is front end web application/server used by students, academic and
administrative staffs, and other is the database which holds the students grades. Most of the
identified threats first targets to attack on the database server because there they can get every
information and can use it for their benefits.
3 | P a g e

Risk assessment:-
The major risk and its remedies are addressed below. The major idea to create a secure IT
network is to develop a secured network from all aspects.
(1) User authentication and access control
(2) Server security
(3) Software security
(4) Software security
(5) Network security
(6) Other risks
Security strategies and action:-
When we are capable of understanding the internal process of the system, then we can easily
understand the risk factors and its solutions. In grade system, the major users are student and
instructor and printing administrator. So, the chances of hacking activities can be taken
through the user interface of the web system. For this the suggested action is to protect the
web server, as well as software because through software also malicious activity can take
place.
Action 1:- Software security:
Threat in software can be performed with the help of malicious code, which can be fed into
the...