Week 4 Assignment – Defense in Depth
Introduction
The process of implementing security frequently opens one’s eyes to other forms of security not previously considered. In this two-part assignment, you should experience just that. This assignment focuses on a model of implementing security in layers, which, in many cases, requires a network that is designed accordingly. The specific course learning outcome associated with this assignment is:
- Recommend best security practices to achieve business objectives based on risk assumptions.
Instructions
Design a network that incorporates the following:
- One corporate site (Chicago).
- All servers exist here (web server, file server, print server, mail server, FTP server).
- Connection to the Internet (50 MBps).
- 300 employees who only need access to local corporate resources and the Internet.
- One remote site (8 miles away).
- 20 employees who need access to all resources at corporate, plus the Internet.
- Connection to the Internet (3 MBps).
Part 1
Use Microsoft Visio or an open-source alternative, such as Dia Diagram Editor, to:
- Create a network diagram with defense in depth in mind, citing specific, credible sources that support the design and depicting at least four-fifths of the following:
- All necessary network devices (routers, switches and/or hubs, firewalls, VPNs, proxies, and others).
- The interconnections between network devices.
- Connections to end-user (client) devices (desktops, laptops).
- Connections from the Internet cloud to the network input.
Part 2
Write a 6–10 page paper in which you:
- Describe the flow of data through the network, citing specific, credible sources.
- Assume data begins at the remote site.
- Data flow may be monitored by an IDS.
- Explain all three elements of the CIA triad and how isolating by network functions helps deliver a layered approach, citing specific, credible sources that support your assertions and conclusions.
- Support your main points, assertions, arguments, or conclusions with at least four specific and credible academic sources synthesized into a coherent analysis of the evidence.
- Cite each source listed on your source page at least one time within your assignment.
