Joint Written Project Proposal Assessing Privacy Risks from Flash Cookies Project Team: Kevin Fuller Stacy Jordan Project Sponsor: Steven Northcutt Project Charter: Providing a review and analysis of the risk posed by the use of flash cookies. To provide guidance on the latest tools and techniques for avoiding, detecting, managing and removing Flash cookies for users and security professionals Scope: The project scope will include: An overview of flash cookies, what they are and how they work. A brief overview of the current developments regarding flash cookie will be included. A review of the risk presented by flash cookies. Examples of websites that install flash cookies A technical review of techniques and tools to avoid, Detect, manage, analyze and delete flash cookies, both open source and commercial. While a number of tools and techniques may be mentioned, only a couple of tools and techniques will be detailed in each category in order to minimize scope expansion. Browser based tools and add-ons will be included in the review. Analysis of a flash cookie or cookies using some of the tools and techniques discussed. Communication Plan: Kevin Fuller: Team member Stacy Jordan: Team member Email: kfuller@dmv.ca.gov 2a373a@hughes.net Phone: 916-412-7836 cell 916-991-1856 home Skype: a2a373 Email: gsuslayj@yahoo.com gsuslayj@cox.net Phone: 678-467-2412 Skype: gsuslayj The team members will maintain communication primarily by email. Telephone contact will be the secondary communication conduit except for when circumstances dictate its use as primary communication conduit. Skype video communications will be used whenever face to face visual communications are necessary to support the project goals. The recommended communication interval will be no longer than 48 hours whenever possible to insure team members maintain continuity and focus on executing the project plan. The team will attempt to schedule at least one Skype video call a week, preferably on a weekend day. Document Plan: The team will share documents between each other using email attachments as opposed to a cloud based document repository. This will better fit the team members work styles and ensure better continuity and integrity of the document contents. All documents in development will use a standard version system of NAME Vx.x. Versions and subversions will run a 0-9 numbering system starting with V1.x. When the documents reach final review the version system will be dropped from the name of the final document to be submitted for grade. Team members will use change tracking features in Office products and/or highlighting to identify changes made by each team member to the document content. Content changes to a document will result in a version change to the next version. Spelling and punctuation changes will not result in a change to the version number. The goal is to maintain continuity during the development process and ensure team members are aware of the changes as they occur. Project Plan: The project plan in its entirety is in the accompanying document /Flash cookies Project Plan.mpp. Chart 1 below is a summary rollup of the project milestones. Chart 2 below is the task breakout under the milestones. Project Preparation Review Project Requirements and Guides 8.75 days 1/16/11 1/24/11 Kevin F,Stacy J 1.5 days 1/16/11 1/17/11 Kevin F,Stacy J Develop Project Plan 8.25 days 1/17/11 1/24/11 Kevin F,Stacy J Begin Project 30 days 1/25/11 2/22/11 Kevin F,Stacy J Research 1/25/11 2/13/11 Kevin F,Stacy J 1/26/11 2/18/11 Kevin F Stacy J Presentation 20 days 24.75 days 10.25 days 2/2/11 2/11/11 Kevin F,Stacy J Press Release 3.25 days 2/12/11 2/14/11 Kevin F,Stacy J Create and Submit Reflections Essay 1 day 2/20/11 2/20/11 Kevin F,Stacy J Submit Project deliverables 1 day 2/21/11 2/21/11 Kevin F Project Complete 1 day 2/22/11 2/22/11 Kevin F,Stacy J White Paper Task Duration Start Finish Resources Project Preparation Review Project Requirements and Guides Develop Project Plan 8.75 days 1.5 days? 8.25 days 1/16/11 1/24/11 1/16/11 1/17/11 Kevin F,Stacy J 1/17/11 1/24/11 Kevin F,Stacy J Task Development 2 days? 1/17/11 1/18/11 Kevin F Task Assignment 3 days 1/17/11 1/19/11 Kevin F,Stacy J Establish Timelines 4 days 1/17/11 1/20/11 Kevin F Coordination Plan 2 days 1/17/11 1/18/11 Kevin F,Stacy J Communication Plan 2 days 1/17/11 1/18/11 Kevin F,Stacy J Document Plan 2 days 1/17/11 1/18/11 Kevin F,Stacy J Final Review 0.5 days 1/21/11 1/21/11 Kevin F,Stacy J Submit Plan 0.5 days 1/21/11 1/21/11 Plan Approved 3 days 1/22/11 1/24/11 Kevin F Debbie S,Stephen N Begin Project 30 days 1/25/11 2/22/11 Research 20 days 1/25/11 2/13/11 Kevin F,Stacy J 10 days 1/25/11 2/3/11 Kevin F,Stacy J 20 days 1/25/11 2/13/11 Kevin F,Stacy J Detection Tools and Techniques 20 days 1/25/11 2/13/11 Kevin F Management Tools and Techniques 10 days 1/25/11 2/3/11 Kevin F Technical Risk 10 days 1/25/11 2/3/11 Kevin F,Stacy J Evaluation of a Flash Cookie 10 days 1/25/11 2/3/11 Stacy J Vender/Peer Research 10 days 1/25/11 2/3/11 Kevin F Stacy J Privacy Research 10 days 24.75 days 1/25/11 2/3/11 Kevin F Stacy J 1/26/11 2/18/11 Kevin F Stacy J Develop Outline 1 day 1/26/11 1/26/11 Kevin F,Stacy J Introduction 3 days 1/27/11 1/29/11 Kevin F Body 14 days 1/27/11 2/9/11 Kevin F,Stacy J Conclusion 2 days 2/9/11 2/11/11 Kevin F References 2/10/11 2/11/11 Stacy J Grammar and Spelling 2 days 1.75 days 2/12/11 2/13/11 Stacy J Review 2 days 2/15/11 2/16/11 Kevin F Stacy J Finish Resources General Internet Research Technical Research White Paper Task Duration Start Remediation 2 days 2/15/11 2/16/11 Kevin F Stacy J Final Review 2 days 10.25 days 2/17/11 2/18/11 Kevin F Stacy J 2/2/11 2/11/11 Kevin F,Stacy J Develop Outline 3 days 2/2/11 2/4/11 Kevin F,Stacy J Create Slides 4 days 2/5/11 2/8/11 Kevin F Review 0 days 2/10/11 2/10/11 Kevin F,Stacy J Remediation 1 day 2/10/11 2/10/11 Kevin F,Stacy J Final Review 1 day 3.25 days 2/11/11 2/11/11 Kevin F 2/12/11 2/14/11 Kevin F,Stacy J Develop Draft 1 day 2/12/11 2/12/11 Stacy J Review 1 day 2/13/11 2/13/11 Kevin F Stacy J Remediation 1 day 2/13/11 2/13/11 Kevin F,Stacy J Final Review 1 day 2/14/11 2/14/11 Kevin F,Stacy J Create and Submit Reflections Essay 1 day 2/20/11 2/20/11 Kevin F,Stacy J Submit Project deliverables 1 day 2/21/11 2/21/11 Kevin F Project Complete 1 day 2/22/11 2/22/11 Kevin F,Stacy J Presentation Press Release