Posted: June 9th, 2022

User authentication

Study Bay Coursework Assignment Writing Help

Introduction

I used to be appointed as the brand new Community Supervisor for Philadelphia Inc. It’s a massive multinational organisation which has an intensive community of PCs comprising greater than 1000 programs. This organisation depends closely on its huge community for its daily operation. Any potential dangers have to be recognized and minimised so far as doable. Lately a lot of PCs have been affected by a virus, inflicting a piece stoppage among the many administration and accounting division. Following this incident of huge scale virus an infection, the corporate administration has determined to utterly Assessment all the pc safety precautions and procedures in use inside the organisation. So, I’ve been designed to make sure that I can establish potential threats to the safety of the organisation’s community and formulate acceptable motion plans and safety insurance policies to minimise the dangers.

Analysis and doc the varied facets of community safety that have to be addressed together with every of the next subjects:

Entry management

User authentication

Firewalls

Virus safety

Accessing the Web (15 Marks)

I’m analysis and doc the varied facets of community safety that have to be addressed.

Entry management

Entry management is the strategies for imposing controls that permit or deny consumer entry to community assets, normally based mostly on a consumer’s account or a bunch to which the consumer belongs. Entry management is security measures that decide which assets customers are permitted to entry, what kind of entry they’re allowed, and what number of simultaneous customers can entry a useful resource on the identical time. They guarantee knowledge privateness and safety and Help preserve a productive computing atmosphere.

User authentication

User authentication is a safety characteristic that permits an administrator to manage who has entry to the community and what customers can do after they’re logged on to the community. This would possibly contain confirming the identification of an individual, the origins of an object, or assuring that a pc program is a trusted one. Authentication is the method of figuring out the identification of a community consumer by verifying a set of consumer credentials, usually a consumer ID and password.

Firewalls

A firewall is a mix of hardware and software program parts that present a protecting barrier between networks with completely different safety ranges. Guidelines for transmitting and receiving info to and from the opposite community will be established for the firewall in order that particular forms of gadgets or addresses usually are not allowed to go between the networks. It sits between the pc and the remainder of the community, and in accordance with some standards, it decides which communication to permit, and which communication to dam. Firewalls shield a pc or community from unauthorised entry and assaults designed to cripple community or pc efficiency. Furthermore, it’s also a tool or set of units configured to allow, deny, encrypt, decrypt, or proxy all pc site visitors between completely different safety domains based mostly upon a algorithm and different standards.

Virus safety

Virus safety means securing knowledge from viruses that’s designed to destroy knowledge or make the pc or community function inefficiently. Pc viruses are the packages that should be triggered or executed earlier than they’ll infect the pc system and unfold to others. Viruses can then be unfold by sharing contaminated information on a community drive, transportable drive, or different media, by exchanging contaminated information over the web by way of e-mail attachments, or by downloading debatable information from the web.

Accessing the web

Accessing the web is the phone communication system that additionally covers the world linking telephones collectively. As with the phone system, every system connected to the community will be reached by a novel code that represents that system’s location. The phone system entry and companies are provided to cellphone customers by an array of competing native, long-distance, and wi-fi phone corporations, entry to the web can also be provided by a variety of entry and internet hosting corporations utilizing an array of various connectivity strategies.

A consumer in your organization calls to report that she’s unable to go browsing to e-mail. You reply with a few fast questions. As a result of you already know that nobody else is utilizing the community proper now, you can not decide if the issue is exclusive to her machine or if the issue impacts your complete community. Probing additional, you additionally study that she’s unable to print. You resolve this drawback might be simpler to troubleshoot from the consumer’s pc.

Utilizing the structured troubleshooting technique, define the issues you will need to verify and the questions you will need to ask if you arrive on the consumer’s workplace. Based mostly on the doable responses to your questions, describe the actions you’ll take to right the potential causes. (10 Marks)

One of many customers in our firm stories me that she’s unable to go browsing to her e-mail account. So, I requested her some questions-

How lengthy the length of your consumer account?

Do you positive the go browsing consumer identify and password is right.

When it begins to unable to go browsing to your e-mail?

After I arrive on the consumer division, I verify her pc and community. I additionally study that she’s unable to print to a community printer. Probing a few of the verify, different customers of this division can ready to go browsing to their e-mail account and might in a position to print. Subsequently, I ask her a few fast questions again-

What has modified because the final time you labored?

Have you ever put in something by yourself?

Are there functions in your pc that aren’t on different computer systems?

Firstly, I verify the ability is plugged in, the Caps lock is on, all of the cables are connected and community permissions for her pc. Then I verify that she will be able to get a connection on-line or not by shopping Google web site and I see there isn’t a connection on-line. So, I verify the Ethernet cable and connection setting. In checking her drawback, I doc that what I do, so I can undo it if I have to. I take advantage of Ping to verify the pc can contact an IP handle of one other PC or not. (Ping is the only and most helpful diagnostic device to develop into aware of and effectively price a couple of minutes experimentation.) The reply message is “Request timed out”. It’s due to the connection or routing error. Then I restart the pc as a result of 90% of all issues disappear when the pc is restart. To verify the router, I Ping the native router, and it fails. So, the issue of the native LAN or the router is certain. Then, I discover the router and change to verify the LED show. And I believe they don’t seem to be regular, so I change the unit OFF, take away and instantly change the ability connection, then change the unit ON. After it has finished, I’m going again to the pc and retry to Ping the native router. I’ve efficiently despatched a message to the native router and obtain a response. Then, I verify the pc can get a connection on-line or not, and might in a position to browse the web site or not. Then I see the pc efficiently get a connection on-line. So, I verify the e-mail account can be capable of go browsing or not and the printer can be capable of print or not. Then I see the issues of the consumer are efficiently solved.

Job three

Produce a Safety Evaluate report, which particulars the precise threats to community safety for ALL of the subjects recognized in Job 1, specifically Entry Management, User Authentication, Firewalls, Virus Safety, and Accessing the Web, alongside along with your proposed options aimed toward lowering the dangers related to every risk. (35 Marks)

Entry Management

Entry management can establish the customers, and confirm their identification by an authentication course of to allow them to be held accountable for their actions. Good entry management programs document and timestamp all communications and transactions in order that entry to programs and data will be audited later. The first goal of entry management is to protect and shield the confidentiality, integrity, and availability of data, programs, and assets.

I take advantage of role-based entry management and rule-based entry management to establish the consumer. Position-based entry management programs permit customers to entry programs and data based mostly on their function inside the organisation. It permits end-users entry to info and assets based mostly on their function inside the organisation. Roles based mostly entry will be utilized to teams of individuals or people.

Rule-based entry management programs permit customers to entry programs and data based mostly on pre-determined and configured guidelines. Guidelines will be established that permit entry to all end-users coming from a specific area, host, community, or IP addresses.

User Authentication

User authentication is a vital side of community pc safety. For community pc, hurt will be attributable to hacking, malicious messages, viruses, malwares, adwares, e-mail attachments, downloading unlawful supplies and lots of different forms of exercise. Furthermore, the key info of the corporate will be stolen by the attacker utilizing spywares and Trojan horses.

User authentication will scale back this hurt by limiting particular person’s entry to some programs, fairly than the entire Web. Community working programs embody instruments that allow directors to specify a variety of choices and restrictions on how and when customers can go browsing to the community. There are alternatives for password complexity necessities, logon hours, logon areas, and distant logons, amongst others. After a consumer is logged on, file system entry controls and consumer permission settings decide what a consumer can entry on a community and what actions a consumer can carry out on the community.

So I specify the numbers of choices and insurance policies for consumer authentication. I specify that the password is required for all customers of the corporate, to make use of the corporate’s pc. The consumer password size should be usually a minimal of 5 to eight characters and consumer passwords will need to have three of those 4 traits: lowercase letters (comparable to abc), uppercase letters (comparable to ABC), numbers (comparable to 123), and particular characters (comparable to [email protected]#). And I specify the coverage that may lock the consumer account to stop from logging on, when a consumer enters an incorrect password 5 instances. In keeping with the consumer account and password, I management which consumer can entry to the community and what he/she will be able to do on the community.

Firewalls

Firewalls shield towards exterior makes an attempt to entry unauthorized assets, they usually shield towards malicious community packets supposed to disable or cripple a company community and its assets. Second use of firewalls positioned between the web and the company community is to limit company consumer entry to web assets.

Firewalls can establish and block distant entry Trojans (Computer virus). Computer virus is a program that purports to be a helpful software program device, but it surely really performs unintended (and sometimes unauthorized) actions or installs malicious or damaging software program behind the scenes when launched. Generally get some program by way of ICQ or by way of IRC and consider this program to be one thing good, whereas the truth is working it can do one thing much less good to the pc. Such program known as Trojan horses. The distinction of a Trojan and a virus is virus has the flexibility to self-replicate and to distribute itself, whereas a Trojan lacks this capability. A particular kind of Trojan is Distant Entry Trojans (RAT). These Trojans as soon as executed within the sufferer’s pc, begin to hearken to incoming communication from a distant matching program that the attacker makes use of. After they get directions from the distant program, they act accordingly, and thus let the consumer of the distant program to execute instructions on the sufferer’s pc.

Firewalls can establish and block distant communication efforts to the extra frequent RAT and by thus blocking the attacker, and figuring out the RAT. There are numerous different forms of Trojan horses which can attempt to talk with the skin from the pc. Whether or not they’re e-mail worms making an attempt to distribute themselves utilizing their very own SMTP engine, or they could be password stealers, or the rest. A lot of them will be recognized and blocked by a firewall.

So, I run the firewall on the server and all of the desktop computer systems to guard Trojans, malware, and to stop customers from accessing offensive Web sites or bandwidth-intensive content material which may not be one of the best use of an worker’s time or the community’s bandwidth.

Firewall units from completely different distributors range fairly a bit in configuration particulars, however they’re all based mostly on one premise: Guidelines are created to find out what kind of site visitors is allowed to enter and exit the community. To configure a firewall, I construct guidelines that permit solely sure packets to enter or exit the community. The firewall can study all incoming packets and discard packets with a vacation spot handle of the community’s restricted phase.

Virus Safety

In internet-connected networks, virus assaults are an everyday risk. Customers obtain packages, carry disks from dwelling, reminiscence sticks, and open e-mail attachments are regular computing actions, however they’ll additionally carry viruses into the community.

A virus is a program that spreads by copying itself into different packages or paperwork. Pc virus can assault pc programs and carry out quite a lot of capabilities starting from annoying to harmful. Its particular person objective is to disrupt pc or community operation by deleting or corrupting information, formatting disks, or utilizing massive quantities of pc assets. If a server file accessed by different customers on the community is contaminated, the virus can unfold by the community in a matter of seconds.

To guard the unfold of viruses, one of the efficient methods is to purchase virus-protection software program from a good supply. Antivirus software program is program that may scan and take away recognized viruses which have contracted. Most antivirus software program can also be designed to detect and forestall worms and viruses. The software program can be set to robotically scan disks when inserted into the disk drive, scan information when downloaded from the Web, or scan e-mail when obtained. Nevertheless antivirus software program is on the market in lots of business and open supply variations, the license-version of the antivirus software program from respected supply is safer and dependable than others.

So, I run the usual antivirus software program from respected supply in server and each desktop pc, and turn-on the scanning options. However by working antivirus software program can solely shield towards viruses that it is aware of about. Subsequently, virus definition information (replace information) for antivirus software program are wanted to obtain from the web day by day or weekly. To get the utmost safety towards viruses on the pc, ensure that to maintain antivirus definition information present.

One other approach to shield the information from virus an infection is “backup the information” which helps to get well the information if the unique information contaminated by the virus.

Accessing the Web

The web entry is the important factor to speak between inside or exterior organisation for a lot of functions. Hundreds of corporations have found the pervasive energy of the Net in distributing info, promoting merchandise, supporting customer support, and staying in contact with purchasers and prospects. Through the use of the web, we will get vital enterprise info which is critical for competitors and enchancment of the corporate.

Nevertheless the web is beneficial for us, but in addition the web assault can hurt the enterprise. The web assaults are organised and designed to steal info and assets from the purchasers and the organisation. Enter validation assaults utilizing the Widespread Gateway Interface (CGI), Energetic Server Pages (ASP), and Chilly Fusion Markup Language (CFML) packages stem from both an online developer or vendor failure. The fundamental drawback occurs from the shortage of sanitizing the enter to a specific script. With out enter validation and sanitizing, it’s doable for attackers to submit a specific character, together with a neighborhood command, as a parameter and have the online server execute it regionally. Generally, the digital web site of the attackers steals consumer info and consumer’s bank card particulars.

If every kind consumer can get permission to entry the community, the personal info of the organisation will be stolen by the attacker utilizing the web. In order that I management the consumer entry to the community assets through the use of entry management and figuring out the consumer account to confirm the community permission for the consumer.

Job four

Create a set of Acceptable Use Insurance policies for every of the next:

Accessing the WWW

Electronic mail Utilization

Immediate Messengers and chat rooms

Every of those paperwork ought to present a set of tips for customers which is able to minimise any related safety threats. (30 Marks)

To minimise any potential dangers and related safety threats of the organisation’s community, all of the workers of the corporate ought to agree the next insurance policies for accessing the World Huge Net, e-mail utilization, on the spot messengers, and chat rooms. All of the workers has accountability to make use of the assets in an environment friendly, efficient, moral and lawful method.

In our organisation, entry to the web is on the market for the staffs to help informational, academic and communicable. So, staffs ought to agree the next web entry insurance policies.

Insurance policies for accessing the WWW

The usage of Web is strongly restricted to “official firm enterprise”. Private use or time spent for private acquire is strictly prohibited.

Authorisation for Web entry should be obtained by your supervisor. As soon as authorisation is authorised you’re accountable for the safety of your account password and you can be held accountable for all use or misuse of your account. It’s essential to preserve safe passwords and by no means use an account assigned to a different consumer.

Staffs are strongly prohibited to accessing web web sites that include obscene, hateful, pornographic, politics or in any other case unlawful materials.

By no means copy or switch digital information with out permission.

Prohibit copying and sending any confidential or proprietary info, or software program that’s protected by copyright and different legal guidelines defending mental property.

Downloading a file or software from the Web can carry viruses with it. Must be scan all downloaded information with commonplace virus prevention software program earlier than being saved on the corporate’s community.

All downloaded functions should be accepted by the corporate’s IT administrator or firm proprietor earlier than being put in on the corporate’s community.

Hacking into unauthorised areas and different worker’s computer systems are strictly prohibited.

Confidential info is to not be transmitted over the web with out correct encryption.

Introducing any type of pc virus or malicious software program into the company community is strictly prohibited.

Electronic mail utilization coverage

Electronic mail is for use for firm enterprise solely. Firm confidential info should not be shared exterior of the Firm with out authorisation, at any time.

When conducting firm’s enterprise, solely use the corporate’s official e-mail account for workers comparable to [email protected]

Staffs are to not conduct private enterprise utilizing the Firm pc or e-mail.

All messages should present the real sender info (from the place and from whom the message originated).

The illustration of your self as another person, actual or fictional, or a message despatched anonymously is prohibited.

Emails for the needs that violate firm standing or laws, or for an unlawful or prison objective is probably not despatched or forwarded by an organization’s community.

Administration has the correct to entry all e-mail information created, obtained, or saved on firm programs and such information will be accessed with out prior notification.

Electronic mail attachments can carry viruses, you must scan for virus after and earlier than downloading the attachments with commonplace virus prevention software program.

Don’t open any e-mail attachments if you don’t acknowledge the sender.

Forwarding of firm confidential messages to exterior areas is strongly prohibited.

Introducing any type of pc virus or malicious software program into the company community is strictly prohibited.

Insurance policies for immediate messengers and chat rooms

Chats, often known as Web Relay Chat (IRC), in addition to Immediate Messaging (IM), are highly regarded modes of shortly speaking with others. In utilizing these IRC and IM, staffs ought to agree the next insurance policies. These insurance policies present staffs with efficient and constant on the spot messaging (IM) use and content material requirements.

Staffs are prohibited from downloading and utilizing private on the spot messenger software program comparable to MSN or Yahoo to transmit messages by way of the general public web.

All IM communications and data transmitted, obtained, or archived within the firm’s IM system belong to the corporate.

The moment messaging and chatting system is meant for enterprise use solely. Staffs are prohibited from losing pc assets, colleague’s time, or their very own time by sending private on the spot messages or partaking in pointless chat associated to enterprise.

Deal with messages as enterprise data that could be retained and used as proof in litigation, audits, and investigations.

At all times use skilled and acceptable language in all on the spot messages. Staffs are prohibited from sending abusive, harassing, threatening, menacing, discriminatory, disrespectful, or in any other case offensive on the spot messages.

Staffs could not use on the spot messengers and chat rooms to transmit confidential, proprietary, private, or probably embarrassing details about the corporate, staff, purchasers, enterprise associates, or different third events.

Introducing any type of pc virus or malicious software program into the company community is strictly prohibited.

Job 5

Put together and ship a brief presentation to your tutor utilizing a presentation package deal like Energy Level which summarises the key factors in your Safety Report and your proposed Acceptable Utilization insurance policies. (10 Marks)

I put together and ship a brief presentation to the tutor utilizing a Energy Level presentation which summarises the key factors in my Safety Report and my proposed Acceptable Utilization insurance policies.

Community computerised system can include varied potential threats. To minise that dangers, community safety is required.

On this presentation, I need to discuss 5 subjects to configure community safety

Entry Management

User Authentication

Firewalls

Virus Safety

Accessing the Web

Entry management can management the consumer account and establish the consumer. It may possibly confirm consumer identification by an authentication course of so customers will be held accountable for their actions. Main goal of entry management is to protect and shield the confidentiality, integrity, and availability of data, programs, and assets.

I take advantage of role-based entry management and rule-based entry management to establish the consumer. Position-based entry management programs permit customers to entry programs and data based mostly on their function inside the organisation. Roles based mostly entry will be utilized to teams of individuals or people. Rule-based entry management programs permit customers to entry programs and data based mostly on pre-determined and configured guidelines. Guidelines will be established that permit entry to all end-users coming from a specific area, host, community, or IP addresses.

User authentication can decide the identification of a community consumer. For community pc, hurt will be attributable to hacking, malicious messages, viruses, malwares, adwares, e-mail attachments, downloading unlawful supplies and lots of different forms of exercise. User authentication can scale back this hurt by limiting particular person’s entry to some programs, fairly than the entire web. Community administrator can management consumer go browsing and specify consumer permission on the community.

So, I configure some choices and insurance policies for consumer authentication. I specify that the password is required for all customers of the corporate, to make use of the corporate’s pc. The consumer password size should be usually a minimal of 5 to eight characters and consumer passwords will need to have three of those 4 traits: lowercase letters (comparable to abc), uppercase letters (comparable to ABC), numbers (comparable to 123), and particular characters (comparable to [email protected]#). And I specify the coverage that may lock the consumer account to stop from logging on, when a consumer enters an incorrect password 5 instances. In keeping with the consumer account and password, I management which consumer can entry to the community and what he/she will be able to do on the community.

Firewalls shield towards exterior makes an attempt to entry unauthorised assets, they usually shield towards malicious community packets supposed to disable or cripple a company community and its assets. And likewise use to limit company consumer entry to inter assets. Firewalls can establish and block distant entry Trojans (Computer virus). Community administrator can configure the foundations for what kind of site visitors is allowed to enter and exit the community. The firewall can study all incoming packets and discard packets.

In internet-connected networks, virus assaults are an everyday risk. Customers obtain packages, carry disks from dwelling, reminiscence sticks, and open e-mail attachments are regular computing actions, however they’ll additionally carry viruses into the community. To guard the unfold of viruses, one of the efficient methods is to purchase virus-protection software program from a good supply. Antivirus software program is program that may scan and take away recognized viruses which have contracted. Most antivirus software program can also be designed to detect and forestall worms and viruses. The software program can be set to robotically scan disks when inserted into the disk drive, scan information when downloaded from the Web, or scan e-mail when obtained. However by working antivirus software program can solely shield towards viruses that it is aware of about. Subsequently, virus definition information (replace information) for antivirus software program are wanted to obtain from the web day by day or weekly. To get the utmost safety towards viruses on the pc, ensure that to maintain antivirus definition information present. One other approach to shield the information from virus an infection is “backup the information” which helps to get well the information if the unique information contaminated by the virus.

Accessing the web is the important factor to speak between inside or exterior organisation. Nevertheless the web is beneficial for us, the web assault can hurt the enterprise. The web assaults are organised and designed to steal info and assets from the purchasers and the organisation. If every kind consumer can get permission to entry the community, the personal info of the organisation will be stolen by the attacker utilizing the web. In order that I management the consumer entry to the community assets through the use of entry management and figuring out the consumer account to confirm the community permission for the consumer.

To minimise any potential dangers and related safety threats of the organisation’s community, all of the workers of the corporate ought to agree the insurance policies for accessing the World Huge Net, e-mail utilization, on the spot messengers, and chat rooms. All of the workers has accountability to make use of the assets in an environment friendly, efficient, moral and lawful method.

Reference

Net Reference

www.en.wikepedia.org

www.businesslink.gov.uk

www.3w.internet

www.reply.com

www.procompgroup.com

http://humanresources.about.com

http://netsecurity.about.com

http://solutions.yahoo.com

www.zytrax.com

www.windowsnetworking.com

www.cryer.co.uk

Guide Reference

Title: Information to Networking Necessities (Fifth Version)

Creator Title: Greg Tomsho, Ed Tittel, David Johnson

Entry date & time: 13 July 2009, 6:30 pm

Title: Fundamentals of and Working Programs (Working System Applied sciences) A+ Fifth Version

Creator Title: Charles J.Brooks

Entry date & time: 15 July 2009, 5:00 pm

Title: Fundamentals of and Working Programs (Software program Service Technicians) A+ Fifth Version

Creator Title: Charles J.Brooks

Entry date & time: 16 July 2009, 7:00 pm