For this project you will determine the effectiveness of existing policy. Learning outcomes Planning and design. Understanding NIST policy. Understanding workplace policy. Overview Get a copy of your workplace digital identity security policies. Now, skim the following documents. NIST Special Publication 800-63a – Enrollment and Identity Proofing NIST Special Publication 800-63b – Authentication and Lifecycle … Read More “CISS-125 Project 8 – Digital Identity Security Policy.” »
Author: William Jojo
For this project you will configure the Uncomplicated Firewall (ufw). This will replace the method of access that was used for SSH in Project 4. Learning outcomes Planning and design. VMware guest modifications. Modifying application software. Security settings using firewalls. Overview Like project 4, you will have two partners for your work, but you will … Read More “CIS-125 Project 6 – Firewalls” »
For this project you will configure the Nbvcxz password strength utility Learning outcomes Planning and design. VMware guest modifications. Modifying application software. Use of GitHub to acquire software. Use maven build environment. Understanding password entropy. Overview Determining the strength of passwords can be difficult. There are many metering tools available and these should be used … Read More “CIS-125 Project 7 – Password Strength” »
For this project you will perform several hardening techniques to your VMs. Learning outcomes Planning and design. VMware guest modifications. Modifying application software. Security settings on multiple platforms. Ubuntu Using the Ubuntu Hardening documentation and the Network Details documentation, perform the following: First: Apply the recommended hardening items minus the SSH secure login. For the … Read More “CISS-125 Project 4 – Server Hardening” »
There are a variety of Ubuntu hardening techniques out there. These are just a few that should be of interest. Secure shared memory Shared memory can be used as an attack vector for running services. Edit the /etc/fstab file and add the following to the bottom: tmpfs /run/shm tmpfs defaults,noexec,nosuid 0 0 A reboot is … Read More “Ubuntu Hardening” »
For this project you will install certificates into web servers (Apache and IIS) and configure them to support HTTPS. Learning outcomes Planning and design. VMware guest modifications. Modifying application software. Secure Communications and Protocols. Installing key and certificates for HTTPS. Apache on Ubuntu If you have not already done so, install the Apache server on … Read More “CISS-125 Project 3 – HTTPS” »
#!/bin/bash -x set -e for C in `echo root-ca intermediate`; do mkdir $C cd $C mkdir certs crl newcerts private cd .. echo 1000 > $C/serial touch $C/index.txt $C/index.txt.attr echo ‘ [ ca ] default_ca = CA_default [ CA_default ] dir = ‘$C’ # Where everything is kept certs = $dir/certs # Where the issued … Read More “Cert script” »
In this project we will use some secure connections with a terminal protocol called SSH. We will also create some certificates that will be used in another project. Learning outcomes Planning and design. Enhancing existing virtualization and networking skills. VMware guest modifications. Installing application software. Public Key Infrastcture. Secure Communications and Protocols. Generate key and … Read More “CISS-125 Project 2 – SSH and Certificates” »
CISS-125 – Computer and Information Security Instructor: William Jojo Email: w.jojo@hvcc.edu Location: Higbee 119 Phone: (518) 629-7540 Updated March 20, 2019 Topical Outline (Student Behavioral Objectives): Security Overview, Threats and Attacks Cryptography, Transport Protocols & Remote Access Network & Device Security Access Management, Authentication and Directories Risk Management Assessments (approximate point values): Journal (50 points) … Read More “CISS-125 Syllabus” »
CISS-125 Project 1 (10 points) (Updated 1/24/2019) You have been given three (3) virtual machines (VMs) in a resource pool that bears your name. Within these VMs, you are to configure the networking and hostnames for each. Learning outcomes Planning and design. Enhancing existing virtualization and networking skills. VMware guest modifications. Installing updates and application … Read More “CISS-125 Project 1 – Planning!” »