1
IT503 Operating Systems
Week 9 Project
2
Question 1:
The following diagram shows the LAN network for the R&D department. Based on the
requirements, “All the computers are part of a network, and we need to monitor the data traffic
between them.” In this case, a network-based IDS placed next to the central switch that
connects all PCs is appropriate to monitor all traffic moving between computers.
The following diagram shows the LAN network for the management office. Similarly, as
we are required that “The data communication traffic among their computers also needs to be
monitored for suspicious activity.” A network-based IDS is used in the network to monitor all
data traffic among the computers.
3
In addition, I have included a diagram for the host based IDS for comparison.
4
Question 2:
The following diagram illustrates how the LANs of the R&D department and the
management office are connected to the internet via the ISP. One firewall is placed between
ISP and intranet to ensure that all external traffic must pass through the firewall before reaching
internal systems.
5
Question 3:
I would recommend using the three-factor authentication to increase the security for the
R&D department and prevent attackers from breaking into the department network.
For example, asking the following information in the following authentication method.
Something the user knows: Passwords/PIN. Something the user has: Smart cards. Something
the user is: Fingerprint.
Example login process:
Step 1: Enter username and password or PIN
Step 2: Insert smart card
Step 3: Scan fingerprint
6
Question 4:
Three access control models are commonly used in the file system to control access to
files and protect data (Stallings, 2017). In particular:
4a) For the R&D department, I would recommend using the mandatory access control
model (MAC). As the documents in the R&D department are classified at different levels of
sensitivity, the MAC model limits the access to resources based on the sensitivity of the
information and the authorization of the users.
4b) For the management office, the role based access control model (RBAC) is
preferred to use to protect data. As the office has different groups of users (marketing, finance
and HR) and each group needs to access different types of data (Google Analytics, customer
database and HR database). The RBAC model restricts the system access based on the role
within an organization.
7
Question 5:
According to the content in the textbook by Stallings (2017), the following steps of
secure the operating system could reduce potential risk of attack and improve computer
security:
1. Install and patch the OS system by ensuring the latest security updates are installed.
2. Configure the OS system and address the identified security needs by removing
unnecessary services, disabling unnecessary applications and network protocols.
Configure users’ permissions using authentication control such as passwords, and
configuring resource controls using file system access control such as limited
privileges.
3. Configure security controls by installing antivirus, host-based firewalls, and intrusion
detection systems.
4. Test the system security by running vulnerability scanners and security checklists to
confirm the configuration is secure and adequately addresses the security needs.
8
Question 6:
To ensure long-term security maintenance for the IT system, the company should take
the following steps as mentioned in (Silberschatz & Galvin, 2013):
1. Monitor system logs and analyze the information to detect suspicious activities.
2. Create backup copies of important data regularly to allow recovery if data is lost or
corrupted.
3. Prepare recovery procedures and to recover from security compromises.
4. Conduct security testing by running vulnerability scans and security audits
periodically.
5. Patch and update software, and regularly install updates for the OS system and
security software.
9
Reference
Tanenbaum, A. (2015). Modern operating systems. Pearson Education, Inc.,.
Stallings, W. (2017). Operating Systems: Internals and Design Principles. Pearson’s.
Silberschatz, A., & Galvin, P. B. (2013). Operating System Concepts.