Davonte Brown

Project
6-25-14
ITT Technical Institute
3825 West Cheyenne Avenue, Suite 600
North Las Veas, Neva!a 8"032
NT2580 Intro!uction to In#or$ation Security
Wee% &, 'nit & ( In#or$ation Syste$s Security )un!a$entals
Project
Security *o$ains an! Strateies
+ur,ose
This project provides you an opportunity to apply the competencies gained in various units o this course to identiy
security challenges and apply strategies o countermeasures in the inormation systems environment!
Learnin -./ectives an! -utco$es
"ou will learn the purpose o a multi-layered security strategy!
"ou will understand the inormation systems security #$%%& undamentals including the deinition o terms'
concepts' elements' and goals!
"ou will incorporate the industry standards and practices with a ocus on the conidentiality' integrity' availa(ility'
and vulnera(ilities o inormation systems!
"ou will ulill the role o a security proessional implementing proper security controls in a speciic (usiness
situation (ased on %ystems %ecurity )ertiied Practitioner #%%)P
*
& )ommon Body o +nowledge domains!
0e1uire! Source In#or$ation an! Tools
To complete the project' you will need the ollowing,
1! -ccess to the $nternet to perorm research or the project
2! )ourse te.t(oo/
0! #$%)&
2
%%)P
*
)ommon Body o +nowledge availa(le in the %%)P
*
)andidate $normation Bulletin
1T2523 $ntro to $normation %ecurity Page 1 o 12 4ee/ 13' 5nit 13
%teve Todd
Davonte Brown
Project
6-25-14
+ro/ect Loistics
The project is divided into one smaller and one major assignment as per the details (elow,
Activity Na$e Assine! *ue 2y 3 4ra!e
Project Part 1! 6ulti-7ayered %ecurity Plan 5nit 1 5nit 2 6
Project Part 2! %tudent %%)P
*
Domain 8esearch
Paper
5nit 2 5nit 11 15
*elivera.les
+ro/ect +art & 5ulti6Layere! Security +lan
Intro!uction
The components that ma/e up cy(erspace are not automatically secure! This includes ca(ling' physical networ/s'
operating systems' and sotware applications that computers use to connect to the $nternet! There is a raging inormation
security war! The goal is to protect national security and (usiness inormation! Thereore' $T is in great need o proper
security controls!
Scenario
8ichman $nvestments is a mid-level inancial investment and consulting irm! The 8ichman corporate head9uarters is
located in Phoeni.' -ri:ona! )urrently' there are eight (ranch oices in,
-tlanta' ;eorgia
)hicago' $llinois
)incinnati' <hio
Denver' )olorado
7os -ngeles' )aliornia
6ontreal' )anada
1ew "or/ )ity' 1ew "or/
4ashington' D!)!
Tas%s
"ou are a networ/ing intern at 8ichman $nvestments! This morning' you received an e-mail rom your supervisor stating
that you need to create an outline o the general security solutions planned or the saety o data and inormation that
(elongs to the organi:ation! "ou are told that every month' the networ/ing division needs to su(mit a report to the senior
management a(out the security plan or the month' and this time' your outline will (ecome a part o that report! Thereore'
you need to research the elements o a multi-layered security plan and to create an outline! "our outline should indicate
one or more general security solutions or each o the seven domains o a typical $T inrastructure!
=or this project part' you may use the (oo/ or this course and the $nternet to research the concept o a multi-layered
security plan! $nclude several applica(le layers or the plan' and descri(e at least one layer o security or each o the
seven domains!
1T2523 $ntro to $normation %ecurity Page 2 o 12 4ee/ 13' 5nit 13
%teve Todd
Davonte Brown
Project
6-25-14
Project Part 1 should (e su(mitted in the ollowing ormat and style,
=ormat, 6icrosot 4ord
=ont, -rial' %i:e 12' Dou(le-%pace
)itation %tyle, -P- 6 v2 #http,>>owl!english!purdue!edu>owl>resource>563>31>&! ?nsure that you always utili:e a
separate cover sheet and reerence page!
7ength, 1@2 pages
Sel#6Assess$ent Chec%list
$ have included several applica(le layers or the plan!
$ have descri(ed at least one layer o security or each o the seven domains!
$ have conducted ade9uate independent research or the report!
+ro/ect +art 2 Stu!ent SSC+
7
*o$ain 0esearch +a,er
Intro!uction
The #$%)&
2
%%)P
*
is re9uently viewed as the irst step in an inormation security career path' leading to the )ertiied
$normation %ystems %ecurity Proessional #)$%%P
*
& and other advanced certiications!
Scenario
)ontinuing the 8ichman $nvestments scenario e.plained in Part 1 o the project' the oices have a total o 5'333
employees' and the oice technology inventory includes des/tops' mo(ile computers' and wireless devices! There is a
mi. o computers running 4indows AP' 4indows Bista' 4indows C' and 6ac <% A! 6ost o the managers have
Blac/Berry devices or instant communication' and all employees are provided cell phones! - 4indows -ctive Directory
orest with domains is set up or each oice' and seven ile and print servers are located in the Phoeni. oice! The
Phoeni. oice also contains two pro.y servers' conigured as an array' that provide 4e( cache services and $nternet
access control or the organi:ation! The majority o applications are 4e(-(ased and hosted rom the Phoeni. oice!
The Phoeni. oice has an $nternet connection to all the remote oices' and the redundancy is e.tremely important to the
company! There are several sensitive applications that all oices use! The management rom each oice shares
application inormation that is hosted at the corporate oice or accounting and reporting purposes!
-ll employees have $nternet access! There is no policy on the use o remova(le media! %everal o the (ranch oices have
encountered issues with malware recently!
8ichman hosts an intranet or employees to access inormation a(out the company and to enroll in company (eneits
programs! 8ichman also hosts an e.tranet or its (usiness partners!
1T2523 $ntro to $normation %ecurity Page 0 o 12 4ee/ 13' 5nit 13
%teve Todd
Davonte Brown
Project
6-25-14
Due to many recent technology and process improvements within 8ichman' the corporate security policy is out o date'
and each (ranch oice policy diers!
Tas%s
"ou are a networ/ing security intern at 8ichman! "ou have (een as/ed to su(mit a proposal to 8ichman senior
management! $n the proposal' you must choose to address one o the ollowing and relate it to the appropriate %%)P
*

domains,
1. Based on the premise that 8ichman has 5'333 employees throughout the main oice and several (ranch oices'
you must research solutions and detail the appropriate access controls including policies' standards' and
procedures that deine who users are' what they can do' which resources they can access' and which operations
they can perorm on a system!
2. Based on the premise that most o the managers have Blac/Berry devices or instant communications and all
employees are provided cell phones' you must research and detail the cryptography methods to protect
organi:ational inormation using techni9ues that ensure its integrity' conidentiality' authenticity' and
nonrepudiation' and the recovery o encrypted inormation in its original orm!
3. Based on the premise that there is a mi. o computers running 4indows 2333' 4indows AP' 4indows Bista'
4indows C' and 6ac <% A' you must research and devise a plan to thwart malicious code and activity (y
implementing countermeasures and prevention techni9ues or dealing with viruses' worms' logic (om(s' Trojan
horses' and other related orms o intentionally created deviant code!
4. Based on the premise that all employees have $nternet access to (rowse the 4e(' there is no policy on the use o
remova(le media' and several o the (ranch oices have encountered issues with malware recently' you must
research and ormulate a plan to implement monitoring and analysis! "ou must determine system implementation
and access in accordance with deined $T criteria as well as how to collect inormation or identiication o and
response to security (reaches or events!
5. Based on the premise that 8ichman hosts an intranet or employees to access inormation a(out the company
and enroll in company (eneits programs' and that 8ichman also hosts an e.tranet or its (usiness partners' you
must research and devise a method to secure networ/s and communications! This should include the networ/
structure' transmission methods and techni9ues' transport ormats' and security measures used to operate (oth
private and pu(lic communication networ/s!
6. Based on the premise that the Phoeni. oice contains two pro.y servers conigured as an array' which provide
4e( cache services and $nternet access control or 8ichman' and that the majority o applications are 4e(-(ased
and hosted rom the Phoeni. oice' you must assess ris/' response' and recovery! )onduct a review o the
implementation processes essential to the identiication' measurement' and control o loss associated with
uncertain events.
7. Based on the premise that the corporate security policy is out o date and each (ranch oice policy diers' you
must research and deine security operations and administration including the identiication o inormation assets
and documentation o policies' standards' procedures' and guidelines that ensure conidentiality' integrity' and
availa(ility!
1T2523 $ntro to $normation %ecurity Page 4 o 12 4ee/ 13' 5nit 13
%teve Todd
Davonte Brown
Project
6-25-14
"ou need to write the proposal as detailed in the instructions a(ove! Be sure that you create a proessional' well-
developed proposal with proper documentation' grammar' spelling' and punctuation! $n addition' document the
vulnera(ilities' methods' and controls eectively!
Project Part 2 should (e su(mitted in the ollowing ormat and style,
=ormat, 6icrosot 4ord
=ont, -rial' %i:e 12' Dou(le-%pace
)itation %tyle, -P- 6 v2 #http,>>owl!english!purdue!edu>owl>resource>563>31>&! ?nsure that you always utili:e a
separate cover sheet and reerence page!
7ength, 4@5 pages
Sel#6Assess$ent Chec%list
$ have created a proessional' well-developed proposal with proper documentation' grammar' spelling' and
punctuation!
$ have successully identiied appropriate %%)P
*
domains and related them to the scenario!
$ have documented the vulnera(ilities' methods' and controls eectively!
$ have conducted ade9uate independent research or the proposal!
Project part 1
-tlanta' ;eorgia is a is the capital o and the most populous city in the 5!%! state o ;eorgia' with an
estimated 2312 population o 440'CC5!
D6E
-tlanta is the cultural and economic center o the -tlanta
metropolitan area' home to 5'45C'201 people and the ninth largest metropolitan area in the 5nited
%tates!
D13E
-tlanta is the county seat o =ulton )ounty' and a small portion o the city e.tends eastward
into De+al( )ounty!
-tlanta was esta(lished in 120C at the intersection o two railroad lines' and the city rose rom the
ashes o the )ivil 4ar to (ecome a national center o commerce! $n the decades ollowing the )ivil
8ights 6ovement' during which the city earned a reputation as Ftoo (usy to hateF or the progressive
views o its citi:ens and leaders'
D11E
-tlanta attained international prominence! -tlanta is the primary
transportation hu( o the %outheastern 5nited %tates' via highway' railroad' and air' with Gartsield@
Hac/son -tlanta $nternational -irport (eing the worldIs (usiest airport since 1JJ2!
D12E D10E D14E D15E
1T2523 $ntro to $normation %ecurity Page 5 o 12 4ee/ 13' 5nit 13
%teve Todd
Davonte Brown
Project
6-25-14
-tlanta is considered an Falpha-F or Fworld cityF'
D16E
and with a gross domestic product o
5%K2C3 (illion' -tlantaIs economy ran/s 15th among world cities and si.th in the nation! To stay sae
and happy in -tlanta youLll need a security system in every home and a great cop and law
environment! The ne.t one is )hicago' $llinois Chicao #
I
> / o > or > / o >& is the third most
populous city in the 5nited %tates' ater 1ew "or/ )ity and 7os -ngeles! 4ith 2!C million residents'
D4E

it is the most populous city in (oth the 5!%! state o $llinois and the -merican 6idwest! $ts metropolitan
area' sometimes called Chicago land' is home to J!5 million people and is the third-largest in the
5nited %tates!
D5E
)hicago is the seat o )oo/ )ounty!
D-E
)hicago was incorporated as a city in 120C' near a portage (etween the ;reat 7a/es and the
6ississippi 8iver watershed' and e.perienced rapid growth in the mid-nineteenth century! $n this state
all youLll need to (e sae is security everywhere and ama:ing security systems in cars and houses!
The ne.t one is Cincinnati >s n s n M ti> is the third largest city in <hio and the 22th largest city in the
5nited %tates (y metropolitan population and the county seat o Gamilton )ounty' <hio' 5nited
%tates!
D6E
%ettled in 1C22' the city is located on the (order (etween <hio and +entuc/y at the
conluence o the <hio 8iver and the 7ic/ing 8iver! -ccording to the 2313 census'
DCE
the population o
the metropolitan area was 2'214'J54 - the 22th largest 6etropolitan %tatistical -rea #6%-& in the
5nited %tates and the largest (ased in <hio!
D2E
8esidents o )incinnati are called Cincinnatians!

To
stay sae here just ma/e sure you have a very good security system and have an ama:ing cop
department and i crime happens just call the cops donLt try to (e a hero! The ne.t one is *enver'
oicially the City an! County o# *enver #>d n v Nr >O -rapaho, 1iinPniiniicQihPheI&'
D12E
is the largest city
and capital o the %tate o )olorado! Denver is also the second-most populous county in )olorado
ater ?l Paso )ounty! Denver is a consolidated city and county located in the %outh Platte 8iver
Balley on the western edge o the Gigh Plains just east o the =ront 8ange o the 8oc/y 6ountains!
The Denver downtown district is located immediately east o the conluence o )herry )ree/ with the
1T2523 $ntro to $normation %ecurity Page 6 o 12 4ee/ 13' 5nit 13
%teve Todd
Davonte Brown
Project
6-25-14
%outh Platte 8iver' appro.imately 12 miles #1J /m& east o the oothills o the 8oc/y 6ountains!
Denver is nic/named the Mile-High City (ecause its oicial elevation is e.actly one mile or 5'223 eet
#1'63J!0 m& a(ove sea level' ma/ing it one o the highest major cities in the 5nited %tates!
D5E
The
135th meridian west o ;reenwich passes through 5nion %tation and is the temporal reerence or the
6ountain Time Rone! To stay sae here all youLll need to do is day same as the other states! The ne.t
one is Los Aneles #
I
>l s M n d N lN s >' >l s M S N lN s > or
i
>l s M n d N li : >' %panish, Los ngeles
Dlos aS.elesE meaning The Angels&' oicially the City o# Los Aneles' oten /nown (y its initials L8A8'
is the most populous city in the 5!%! state o )aliornia and the second-most populous in the 5nited
%tates' ater 1ew "or/ )ity' with a population at the 2313 5nited %tates )ensus o 0'CJ2'621!
DCE
$t has
a land area o 46J s9uare miles #1'215 /m
2
&' and is located in %outhern )aliornia!
The city is the ocal point o the larger 7os -ngeles@7ong Beach@%anta -na metropolitan statistical
area and ;reater 7os -ngeles -rea region' which contain 10 million
D2E
and over 12 million people in
)om(ined statistical area respectively as o 2313' ma/ing it one o the most populous metropolitan
areas in the world
DJE
and the second-largest in the 5nited %tates! The ne.t one is 5ontreal #
I
>mantra
l>O
D5E
=rench, Montral '
D6E
pronounced, Dm ealE # listen&& is a city in the )anadian province o
Tue(ec! $t is the largest city in the province' the second-largest in )anada and the 2th-largest in
1orth -merica! <riginally called Ville-Marie' or F)ity o 6aryF'
DCE
it is named ater 6ount 8oyal'
D2E
the
triple-pea/ed hill in the heart o the city! The city is on the $sland o 6ontreal' which too/ its name rom
the same source as the city'
DJED13E
and a ew much smaller peripheral islands' the largest o which is Ule
Bi:ard!
$n 2311 the city had a population o 1'64J'51J!
D2E
6ontrealIs metropolitan area #)6-& #land area 4'25J
s9uare /ilometres #1'644 s9 mi&& had a population o 0'224'221
D4E
and a population o 1'226'421 in the
ur(an agglomeration' all o the municipalities on the $sland o 6ontreal included!
D11E
1T2523 $ntro to $normation %ecurity Page C o 12 4ee/ 13' 5nit 13
%teve Todd
Davonte Brown
Project
6-25-14
=rench is the cityIs oicial language
D12ED10E
and is the language spo/en at home' as TuP(Pcois =rench'
(y 56!JV o the population o the city' ollowed (y ?nglish at 12!6V and 1J!2V other languages #in
the 2336 census&!
D14E
$n the larger 6ontreal )ensus 6etropolitan -rea' 6C!JV o the population spea/s
=rench at home' compared to 16!5V who spea/ ?nglish!
D15E
56V o the population are a(le to spea/
(oth ?nglish and =rench' ma/ing 6ontreal one o the most (ilingual cities in Tue(ec and )anada!
D16E

6ontreal is the second largest primarily =rench-spea/ing city in the world' ater Paris! The ne.t one is
Ne9 :or% is the most populous city in the 5nited %tates and the center o one o the most populous
ur(an agglomerations in the worldWthe 1ew "or/ metropolitan area!
D6E
The city is reerred to as Ne9
:or% City or the City o# Ne9 :or% to distinguish it rom the %tate o 1ew "or/' o which it is a part! -
glo(al power city'
DCE
1ew "or/ e.erts a signiicant impact upon commerce' inance' media' art' ashion'
research' technology' education' and entertainment! The home o the 5nited 1ations Gead9uarters'
D2E

1ew "or/ is an important center or international diplomacy
DJE
and has (een descri(ed as the cultural
and inancial capital o the world!
D13ED11ED12ED10ED14E
<n one o the worldIs largest natural har(ors'
D15E
1ew "or/ )ity consists o ive (oroughs' each o
which is a county o 1ew "or/ %tate!
D16E
The ive (oroughsWthe Bron.' Broo/lyn' 6anhattan' Tueens'
and %taten $slandWwere consolidated into a single city in 12J2!
D1CE
4ith a census-estimated 2310
population o 2'435'20C
D4E
distri(uted over a land area o just 035 s9uare miles #CJ3 /m
2
&'
D12E
1ew "or/
is the most densely populated major city in the 5nited %tates!
D1JE
-s many as 233 languages are
spo/en in 1ew "or/'
D23ED21E
ma/ing it the most linguistically diverse city in the world!
D22E
By 2310 census
estimates' the 1ew "or/ 6etropolitan -reaIs population remains (y a signiicant margin the 5nited
%tatesI largest 6etropolitan %tatistical -rea' with appro.imately 1J!J million people'
D20E
with a 2312
gross metropolitan product o over 5%K1!0 trillion that ran/ed (ehind the ;DP o only twelve nations!
D24E
1ew "or/Is )om(ined %tatistical -rea is also the most populous in the 5nited %tates' containing an
estimated 20!4 million people!

The last one is Washinton, *8C8' ormally the *istrict o# Colu$.ia
1T2523 $ntro to $normation %ecurity Page 2 o 12 4ee/ 13' 5nit 13
%teve Todd
Davonte Brown
Project
6-25-14
and commonly reerred to as Washinton' Fthe *istrictF' or simply *8C8' is the capital o the 5nited
%tates! The signing o the 8esidence -ct on Huly 16' 1CJ3' approved the creation o a capital district
located along the Potomac 8iver on the countryIs ?ast )oast! The 5!%! )onstitution provided or a
ederal district under the e.clusive jurisdiction o the )ongress and the District is thereore not a part
o any 5!%! state!
The states o 6aryland and Birginia each donated land to orm the ederal district' which included the
pree.isting settlements o ;eorgetown and -le.andria! 1amed in honor o ;eorge 4ashington' the
)ity o 4ashington was ounded in 1CJ1 to serve as the new national capital! $n 1246' )ongress
returned the land originally ceded (y Birginia and created a single municipal government or the
remaining portion o the District in 12C1! +now since you /now a little a(out all ive o this states all $
need to tell you a(out (eing sae is have a security system in all the house have cameras and a great
police department! <nce all the states do that youLll (e ine to enjoy your lie! ThatLs was my essay
hope you enjoyed!
Part 2
?very day there are people wrestling with diseases caused (y mem(ers o
the picornavirus amily' which includes polioviruses' hepatitis - viruses' and
rhinoviruses! -ccording to the 4orld Gealth <rgani:ation' in developing
countries with poor environmental hygienic conditions' nearly all children are
inected with hepatitis - virus (eore the age o J! $n addition' poliomyelitis is still
endemic in 6 countries! ?ven though enormous eort has (een made to
investigate the replication cycle o picornavirus' deinitive answers still remain
elusive! -mong the mem(ers o the picornavirus amily' the poliovirus has (een
(est understood' thus it provides an e.cellent model through which to study
1T2523 $ntro to $normation %ecurity Page J o 12 4ee/ 13' 5nit 13
%teve Todd
Davonte Brown
Project
6-25-14
picornavirus replication cycle!
Picornaviruses are positive-sense' single-stranded 81- viruses that code
or a large polyprotein that serves as the precursor to all viral proteins! 5pon
entry' the virus will inhi(it host cell protein synthesis to allow only the translation
o picornavirus m81-! 4hen suicient viral proteins are synthesi:ed' pac/aged
positive-sense virion 81-s are released into the e.tracellular environment!
Previous e.periments have shown that a small viral protein with a molecular
weight o a(out 2!2 /Da is (ound to the 5L terminus o picornavirus genomic 81-
(y a phosphodiester (ond (etween its own tyrosine residue and the 5L-terminal
uridine o the virion 81- #1' 4&! BPg is now /nown or its critical role as a primer
in virion 81- replication! $nterestingly' BPg is not present on picornavirus
messenger 81-s' which are used as templates or viral protein synthesis during
the inectious cycle #1' 4' 5&! Thus' it appears that the cleavage o the protein-
81- (ond is a precursory step to translation o m81-' carried out (y an
un/nown en:yme in the host cell' designated Xunlin/aseY' that speciically
recogni:es the tyrosyl-81- phosphodiester (ond #2' 6&! The en:ymatic activity
o unlin/ase is present in uninected Ge7a cells' suggesting the en:yme serves
other purposes in normal cells #0&!
8esearch on the structure and unction#s& o unlin/ase is o interest
(ecause similar en:ymatic activities have not (een identiied in mammalian cells'
e.cept or that o tyrosyl-D1- phosphodiesterase #C&! 5nderstanding how the
un/nown en:yme interacts with BPg will elucidate its role in picornavirus
replication' and may eventually help us to construct new drugs to ight against
mem(ers o the picornavirus amily! Thus' our project aims to #i& determine
which' i any' human protein will interact with poliovirus BPg in yeast two-hy(rid
1T2523 $ntro to $normation %ecurity Page 13 o 12 4ee/ 13' 5nit 13
%teve Todd
Davonte Brown
Project
6-25-14
assay and #ii& develop an assay to test BPg cleavage rom genomic 81- using
poliovirus as our model system!
4e will ocus on two main hypotheses, %ince BPg is a(sent in poliovirus
messenger 81- (ut present in virion 81- and negative strand 81- replication
intermediates' we hypothesi:e that uninected host cells contain an en:yme that
2
cleaves BPg rom poliovirus genomic 81-' a step that is vital or the translation
o poliovirus m81-! =urthermore' past data on the /inetics o unlin/ase have
suggested that unlin/ing o the phosphodiester (ond (etween BPg and the virion
81- is only a minor activity o the en:yme #2&! Thus' we hypothesi:e that the
en:yme may have other important roles in uninected cells! =or e.ample' other
tyrosine-nucleic acid (onds may (e present in the normal cell environment!
5aterials an! 5etho!s
Genetic Approach: BD Matchmaker GAL T!o-Hy"rid #ystem $ % &retrans'ormed
HeLa cell cD(A li"rary) Tests will (e irst carried out to veriy that
BPg is not to.ic to yeast cells o strain -G13J' which we use as the host strain'
and that the reporter gene is not activated at all times! %ince our Ge7a cell cD1-
li(rary is already pre-transormed into "12C yeast, we will then transorm strain
-G13J with the X(aitY plasmid' which contains the BPg usion insert' and mate it
to our pre-transormed yeast so a single yeast cell will contain (oth the (ait
plasmid and the cD1- plasmid #2' J&! $ unlin/ase interacts with the single copy
o BPg' or the X(ait proteinY' it will activate transcription o our reporter genes
#=igure 1&! -s a result' the yeast colonies will turn (lue to show that positive
1T2523 $ntro to $normation %ecurity Page 11 o 12 4ee/ 13' 5nit 13
%teve Todd
Davonte Brown
Project
6-25-14
protein-protein interaction is present in *i*o in yeast! That was my essay on medicine hope you
learned a lot

1T2523 $ntro to $normation %ecurity Page 12 o 12 4ee/ 13' 5nit 13
%teve Todd