INFT5029: Enterprise Security - Enterprise Security Design and Implementation - Computer Science Assignment Help

Assignment Task:

Scenario
You are a Security Engineer in an Enterprise organisation. All System Administrators (“Sys Admins”) have “root access” to all the Linux servers in Production.

You are responsible to implement a Privileged Identity Management (PIM). The PIM solution will leverage a Bastion host to remove Sys Admins’ standing privileges. A privilege elevation workflow will be required whereby the Operations Manager will approve time-boxed requests for root access.

Only SSH is in-scope.
Use 2 Linux Centos 7 server
HarshiCorp Vault as a bastion
WSO2 for the implementation.
The conceptual architecture is shown in Figure 1.

Design
Create a design document for your PIM solution. A possible document structure might be:

1. Context (describe the business problem we are addressing)

2. Conceptual Design

• Requirements (as per Table 1)
• Assumptions (unknowns that you cannot validate)
• Constraints (limitations imposed on the design)

3. Logical Design

• Diagram (show the solution components)
• Bastion Host (describe each component)
• Approval Workflow
• Auditing

…

Implementation
Implement your design. You may:

• Develop a set of scripts.
• Document a set of procedures for executing the steps manually.
• Use open source software (e.g. WSO2, etc.).
• Use a combination of the above.

Please include screenshots to demonstrate each step of your PIM environment implementation. If using scripts, please provide the full code for your scripts. Likewise, if performing steps manually, include the full set of instructions.

Use Cases
Demonstrate that your implementation complies with the requirements by executing the following use cases. The roles required are described in Table 2.

Table 2: Roles

Provide screenshots to demonstrate each use case performs as expected.

Use Case 1
The sysadmin user cannot connect to secure01.

Use Case 2
The sysadmin logs into Bastion and requests approval to login to secure01. The opsman approves sysadmin’s request.

The sysadmin can login to secure01 from Bastion.

Use Case 3
The sysadmin logs into Bastion and requests approval to login to secure01 for 10 minutes. The opsman approves sysadmin’s request.

The sysadmin can login (SSH) to secure01 from Bastion (within 10 minutes.)

The sysadmin attempts to login (SSH) to secure01 after 10 minutes and access is denied.

Extension
The Chief Information Security Officer (CISO) has issued a directive that all privileged access requires multi-factor authentication. Access to all servers therefore requires approval from the Operations Manager AND a second factor of authentication.

Factor these requirements into your design, document how you’ve implemented them, and demonstrate their effectiveness in your use cases.

You may choose the mechanism e.g. Google Authenticator, One Time Password (OTP), etc.

Referencing
References should be used to support all key arguments and justify decisions made. Referencing should be in the standard UniSA-Harvard format.

The University provides extensive guidance on academic report writing and referencing which can be accessed from https://unisa.edu.au/studyhelp. Please ensure that you are familiar with the resources provided, particularly regarding referencing. This assessment will provide you with the opportunity to develop and demonstrate both your technical and your academic report writing skills.

All content in your submission must be either original or appropriately paraphrased and synthesized, preferably from multiple sources. Please note that presenting synonymized (or similarly appropriated) content from other sources is not an appropriate approach for any element of this assessment and will not attract any marks.

Any content (or ideas) in the report which is not the student’s own original research or implementation results must be clearly and correctly referenced, both in-text and in the reference list. Failure to include both an in-text citation and a reference list entry for this content will result in no marks being awarded for the relevant content and may result in an academic integrity investigation.

This is an individual assessment; students should not collaborate with any other person on any element of this assessment. For example, sharing a computer to complete the practical elements of the assessment is not permitted.

This INFT5029: Computer Science Assignment has been solved by our Computer Science Experts at onlineassignmentbank. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our Experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.