CO
4
509 – Computer Security
Assignment
2
Martin Bateman
mbateman@uclan.ac.uk
April 28, 2020
Due date:
3
1
st May 2020 11:59pm
Weighting: 50%
Size: 12 pages, 3000 words
Assignment Description
WidgetsInc has contracted Benny Vandergast Inc to develop their new web-
based store. Benny Vandergast Inc has provided a VMware virtual machine for
testing. WidgetsInc have decided to give you the job of evaluating the security
of the system provided by Benny Vandergast Inc
.
You should perform a security evaluation on the provided virtual machine
image. You have not been supplied with either the IP address of the system or
any usernames and passwords, you have have to discover these as part of your
investigation.
Requirements
Your report should include:
• A description of how you investigated the security of the system.
– include fully cited information on tools and techniques you used.
• A description of the results obtained.
• A proposal on how to secure the system.
– you should address each of the security issues you find.
1
Learning Outcomes
2. Propose and justify suitable security for a networked computer system.
3. Use a range of security-related tools.
4. Critically evaluate tools and techniques for system security.
6. Research and report on a security-related topic, using appropriate
literature.
Submission
The assignment work should be submitted as a Word document or Portable
Document Format to the correct assignment slot on Blackboard1 before 11:59pm
on the 31st May 2020.
Late work
Late work must be submitted to Blackboard in the required assignment slot.
Penalties for late submission
Except where an extension of the hand-in deadline date has been agreed (using
extenuating circumstances forms), lateness penalties will be applied in accor-
dance with University policy as shown in Table 12.
(Working) Days Late Penalty
up to 5 maximum mark 50%
more than 5 0%
Table 1: Late submission penalty
Extenuating circumstances
If you believe that you have circumstances that justify an extension of the
hand-in deadline for your assignment work, you should use the Extenuating
Circumstances procedure. Extensions (to a maximum of 10 working days) can
be granted when there are serious and exceptional factors outside of your control.
Everyday occurrences such as colds and hay fever do not normally qualify for
1http://portal.uclan.ac.uk/
2https://www.uclan.ac.uk/study_here/student-contract-taught-programmes.php
2
extensions. Where possible, requests for extensions should be made before the
submission date.
The University considers extenuating circumstances to be conditions that
significantly impact on your work. Normally these will cover more than one
module. Requests for consideration of extenuating circumstances in respect
of assignment work submission, should be made using the MyUCLan3. You
shoud speak to your Academic Advisor prior to submitting. Whilst extenuating
circumstances are being considered, you should inform relevant module leader,
and continue with the assignment.
Feedback
Feedback will be given to the class within 15 working days of the assignment
hand-in date. This may be done in the first fifteen minutes of the lecture. This
will be followed by individual written feedback tying to the Learning Outcomes
listed in the assignment brief, together with any additional helpful feedback
such as areas for improvement and areas for improvement.
Plagiarism
The University uses an electronic plagiarism detection system where your work
could be uploaded, stored and cross-referenced against other material. You
should know that the software searches the WWW, an extensive collection of
reference material and work submitted by members of the same cohort to iden-
tify duplicates.
For detailed information on the procedures relating to plagiarism, please see
the current version of the University Academic Regulations4.
Reassessment and Revision
Reassessment in written examinations and coursework is at the discretion of
the Course Assessment Board and is dealt with strictly in accordance with
University policy and procedures. Revision classes for referrals will take place
during ’reassessment revision, appeals and guidance week’ as marked on the
academic calendar.
The mark for the reassessed component is subject to a maximum of 50%.
3http://myuclan.uclan.ac.uk/
4https://www.uclan.ac.uk/study_here/student-contract-taught-programmes.php
3
A
ss
es
sm
en
t
cr
it
er
ia
F
a
il
(1
0
)
P
a
ss
(5
0
)
M
er
it
(6
0
)
D
is
ti
n
ct
io
n
(7
0
)
8
0
(8
0
)
In
ve
st
ig
at
i
o
n
(3
0
)
B
ri
ef
d
es
cr
ip
ti
o
n
.
In
v
es
ti
g
a
ti
o
n
is
s
u
p
er
fi
ci
a
l.
S
o
m
e
se
cu
ri
ty
is
s
u
es
h
a
v
e
b
ee
n
id
en
ti
fi
ed
v
ia
th
e
u
se
o
f
a
u
to
m
a
ti
c
to
o
ls
.
O
n
ly
in
v
es
–
ti
g
a
te
s
o
n
e
a
re
a
o
f
th
e
sy
s-
te
m
e.
g
.
ju
st
w
eb
sh
o
p
,
O
S
o
r
th
e
r
u
n
n
in
g
se
rv
ic
es
.
In
v
es
ti
g
a
ti
o
n
in
cl
u
d
es
m
u
l-
ti
p
le
a
sp
ec
ts
(O
S
,
se
rv
ic
es
,
a
p
p
li
ca
ti
o
n
et
c)
.
O
r
g
o
es
i
n
d
ep
th
in
to
a
si
n
g
l
e
a
s
p
ec
t
o
f
th
e
sy
st
em
.
G
o
o
d
c
o
v
er
a
g
e
a
cr
o
ss
th
re
e
o
r
m
o
re
a
sp
ec
ts
(O
S
,
se
r-
v
ic
es
,
a
p
p
li
ca
ti
o
n
et
c)
.
O
r
g
o
es
in
d
ep
t
h
in
to
a
t
w
o
a
s-
p
ec
ts
.
E
x
ce
ll
en
t
co
v
er
a
g
e
a
cr
o
ss
a
ll
a
sp
ec
ts
o
f
th
e
sy
st
e
m
.
P
a
ss
–
w
o
rd
s
h
a
v
e
b
ee
n
re
co
v
er
ed
ra
th
e
r
th
a
n
o
v
er
w
ri
tt
en
.
Im
pl
ic
at
io
n
s
(3
0
)
B
ri
ef
d
es
cr
ip
ti
o
n
.
P
o
o
r
o
r
o
b
v
i
o
u
s
im
p
li
ca
ti
o
n
s
fo
r
ea
ch
v
u
ln
er
a
b
il
it
y
fo
u
n
d
.
O
r
o
n
ly
so
m
e
im
p
li
ca
ti
o
n
s
a
re
a
d
d
re
ss
e
d
o
r
th
e
im
p
li
–
ca
ti
o
n
s
d
o
n
’t
m
a
tc
h
u
p
w
it
h
th
e
se
v
er
it
y
o
f
th
e
p
ro
b
le
m
.
L
im
it
ed
d
es
cr
ip
ti
o
n
o
f
th
e
is
–
su
e
a
n
d
th
e
i
m
p
li
ca
ti
o
n
s
.
E
it
h
er
a
ll
a
sp
ec
t
co
v
er
ed
b
u
t
to
a
su
p
er
fi
ci
a
l
le
v
el
o
r
o
n
ly
g
o
es
in
to
d
et
a
il
o
f
a
fe
w
o
f
th
e
is
su
es
fo
u
n
d
.
G
o
o
d
d
es
cr
ip
ti
o
n
o
f
th
e
is
–
su
e
a
n
d
it
s
im
p
li
ca
ti
o
n
s.
A
ll
is
su
es
a
d
d
re
ss
es
.
E
x
ce
ll
en
t
d
es
cr
ip
ti
o
n
o
f
th
e
is
su
e
a
n
d
it
s
im
p
li
ca
ti
o
n
s.
A
cc
u
ra
te
a
n
d
co
n
ci
se
d
e-
sc
ri
p
ti
o
n
o
f
ea
ch
is
su
e.
E
a
ch
is
su
e
in
cl
u
d
es
a
d
es
cr
ip
ti
o
n
o
f
h
o
w
to
ex
p
lo
it
th
e
p
ro
b
–
le
m
.
S
ec
ur
in
g
(3
0
)
B
ri
ef
d
es
cr
ip
ti
o
n
d
o
es
n
’t
re
–
a
ll
y
se
cu
re
th
e
sy
st
em
.
P
o
o
r
o
r
o
b
v
io
u
s
w
a
y
o
f
se
cu
ri
n
g
th
e
sy
st
em
,
e.
g
.
o
v
er
a
ll
re
co
m
m
en
d
a
ti
o
n
o
f
ju
st
fi
r
e
w
a
ll
/
p
a
tc
h
in
g
ra
th
er
th
a
n
th
e
w
a
y
o
f
d
ea
li
n
g
w
it
h
ea
ch
p
ro
b
le
m
.
L
im
it
ed
d
es
cr
ip
ti
o
n
o
f
h
o
w
to
se
c
u
re
th
e
is
su
es
fo
u
n
d
.
G
o
o
d
d
es
cr
ip
ti
o
n
o
f
h
o
w
to
se
cu
re
th
e
is
su
es
fo
u
n
d
.
E
a
ch
id
en
ti
fi
ed
is
su
es
is
a
d
–
d
re
ss
ed
.
E
x
ce
ll
en
t
d
es
cr
ip
ti
o
n
o
f
h
o
w
to
se
cu
re
th
e
p
ro
b
le
m
s
fo
u
n
d
.
D
oc
um
en
ta
ti
on
(1
0
)
V
er
y
p
o
o
r.
F
o
r
ex
a
m
p
le
n
o
t
re
fe
re
n
ce
d
,
d
o
es
n
’t
a
d
d
re
ss
th
e
q
u
es
ti
o
n
o
r
v
er
y
p
o
o
r
sp
el
li
n
g
a
n
d
g
ra
m
m
a
r
m
a
k
–
in
g
it
h
a
rd
to
u
n
d
er
st
a
n
d
.
S
o
m
e
it
em
s
a
re
re
fe
re
n
ce
d
.
P
o
o
r
g
ra
m
m
a
r,
sp
el
li
n
g
.
R
ef
er
en
ce
d
.
G
o
o
d
sp
el
li
n
g
,
g
ra
m
m
a
r.
L
a
y
o
u
t
is
co
n
si
s-
te
n
t
a
n
d
m
a
k
e
se
n
se
.
G
o
o
d
q
u
a
li
ty
d
o
cu
m
en
ta
–
ti
o
n
.
A
ll
it
em
s
re
fe
re
n
ce
d
,
fi
g
u
re
s
a
re
la
b
el
le
d
.
E
x
ce
ll
en
t.
P
u
b
li
sh
a
b
le
q
u
a
l-
it
y.
4