COMP30019: Network Security - Microsoft Forefront Threat Management Gateway - Cryptography and Digital Signatures - IT Assignment Help

Assignment Task:

Module Learning Outcomes
The following Los is achieved by the student by completing the assignment successfully
1. Demonstrate an understanding of cryptography and digital signatures
2. Demonstrate an understanding of authentication requirements and applications
3. Design and Configure Microsoft Forefront Threat Management Gateway and implement network polices

Assignment Objective
Evaluate the students understanding of asymmetric cryptography for data encryption and digital signature. Also the students will evaluate different types of authentication mechanisms and requirements. Moreover, a practical part of designing and implementing TMG based on some security requirements.

Assignment Tasks
Task 1
Secure information and communication techniques derived from mathematical concepts and a set of rule-based calculations called algorithms, to transform messages in ways that are hard to decipher. These deterministic algorithms are used for cryptographic key generation, digital signing, verification to protect data privacy, web browsing on the internet, and confidential communications such as credit card transactions. One of the cryptography types is asymmetric cryptography that is used to provide data confidentiality and non-repudiation. One of the most common algorithm in this type is RSA. Assume the RSA algorithm parameters are ( p = 29, q = 23 and e =17)
a. Explain the process of securing the communication between two parties using asymmetric cryptography.
b. Using the given RSA parameters, Generate your key pairs for asymmetric cryptography.
c. Suppose Ali wants to send you the PIN cod = 124 confidentially. Discuss in details, how to exchange this PIN code by implementing RSA algorithm.
d. Explain how you will use asymmetric cryptography in a digital signature.
e. Critically evaluate the security attacks on asymmetric cryptography.

Task 2
Authentication is element of a typical security model. It is the process of confirming the identification of a user (or in some cases, a machine) that is trying to log on or access resources. There is a number of different authentication mechanisms, but all serve this same purpose.
a. Critically analyze any five user authentication mechanisms. (20 marks)
b. Critically evaluate the security threats for each authentication mechanism. (20 marks)

Task 3:
You are the network administrator for MACRO Company. The company has implemented Microsoft Forefront TMG as a security gateway. The company works 5 days a week (Sunday to Thursday) from 7am to 3pm. The company has the following requirements:

The Company management wants to implement Network Inspection System (NIS). The goal is to enable inspect all networks traffic except the traffic of administration servers, which does not require NIS traffic evaluation. Also, MACRO Company wants to configure intrusion detection system to detect the common attacks and DNS attacks, UDP bomb and IP half scan attacks and all sorts of DNS attacks.

Implement the following tasks to meet the company’s requirements and provide screenshots report for your implementation.

Task 3.a Configure network Inspection System (NIS) as following:

• Configure an exception named ‘admin_YOURNAME’ (e.g: admin_ALI) for the NIS with IP addresses 192.168.20.18 to 192.168.20.28.
• Signature should be updated 48 times per a day.
• The NIS should alerting after 10 days if there is no update installed
• Anomaly signature need to be denied.

Task 3.b Configure an intrusion detection System (IDS)as following:

• The IDS should detect for Ping of death, UDP bomb and IP half scan attacks.
• Also it should detect all port scanning attacks whenever the number of attacks exceed 5 for well-known ports and 10 for all other ports.
• The IDS should detect all types of DNS attack.
• The IDS should detect the SYN flood attacks and UDP flood attacks
• The IDS should monitor any attempt of DoS attack
• The IDS should block any IP address that exceed 200 TCP connection

1. Student Academic Integrity Policy:
MEC upholds the spirit of academic integrity in all forms of academic work and any form of violation of academic integrity shall invite severe penalty. Any benefit obtained by indulging in the act of violation of academic integrity shall be cancelled.

All cases of violation of academic integrity on the part of the student shall fall under any of the below mentioned categories:
1. Plagiarism
2. Malpractice
3. Ghost Writing
4. Collusion
5. Other cases

If the student fails a module and has a proven case of academic integrity violation in this module, the student is required to re-register the module. This is applicable to first and second offenders of plagiarism.

Assessment Evaluation Criteria

This COMP30019: IT Assignment has been solved by our IT Experts at My Uni Paper. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our Experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.