Great Deal! Get Instant $10 FREE in Account on First Order + 10% Cashback on Every Order Order Now

IT IS VERY IMPORTANT TO READ THE INSTRUCTIONS!!! THIS IS DOCTORAL WORK. Turnitin and Waypoint are being used to check for plagiarism, and please use APA format. Please pay close attention I NEED...

1 answer below »

Introduction


In this three-part assignment, you will design a secure network infrastructure.


The specific course learning outcome associated with this assignment is:



  • Plan a deployment of software and/or hardware, including implementation and testing considerations.


Instructions


Part 1


Use Microsoft Visio or an open-source alternative to:



  • Create a network infrastructure diagram, incorporating the following devices needed for a secure corporate network, placed where they will work, and citing specific, credible sources that support the design.Note:A web search will provide multiple examples of network infrastructure diagrams.

    • Web server.

    • FTP server.

    • VPN server.

    • Authentication server.

    • Anti-virus server (client-based and server-based).

    • Edge firewall.

    • Firewall.

    • Vulnerability scanner.

    • Intrusion detection system (IDS).

    • Web proxy.

    • Edge router.

    • Core router.

    • Switch.

    • Distribution router.





Note:All client-and server-based devices work where a client is installed on a workstation, which has bi-directional communication with a corresponding server.


Part 2


Write a 6-10 page paper in which you:



  • Determine the specific devices you will use in the network, including the following information for each device:

    • Make or vendor's name (for example, Microsoft, Redhat, Cisco, Juniper, Netgear, 3Com).

    • Model (for example, Windows 7, ASA 5500, Cisco 3500, Squid).

    • IP address assigned to all devices.



  • Determine the basic configuration of each network device, citing specific, credible sources that support the configuration.

    • Research each of the devices you chose and provide a basic configuration you would use in your network.

    • Use IP addresses to describe your configuration.

    • Identify the operating system.

    • Highlight at least five security features and the administrative controls incorporated into each device, including devices in the network diagram.

    • Explain the impact that each of your configurations has on the security of the entire network.



  • Explain the elements that must be addressed for planning and testing a network, citing specific, credible sources that support your assertions and conclusions.

    • Organizational requirements and expectations.

    • Budget.

    • Modularity for security and testing.

    • Naming conventions that facilitate layering and growth.

    • Determination of required network speed and data capacity.

    • Vendor support.

    • Determination of risk and redundancy.

    • Uptime requirements.

    • Continuous data monitoring for fault, failure, or security-induced changes.

    • Load balancing.

    • Testing for latency.

    • Bandwidth.

    • Throughput.

    • Specific software and tools.



  • Support your main points, assertions, arguments, or conclusions with at least four specific and credible academic sources synthesized into a coherent analysis of the evidence.

    • Cite each source listed on your source page at least one time within your assignment.

    • For help with research, writing, and citation, access thelibraryor reviewlibrary guides.




This course requires the use of Strayer Writing Standards (SWS). The library is your home for SWS assistance, including citations and formatting. Please refer to theLibrary sitefor all supports. Check with your professor for any additional instructions.


Part 3


Use Microsoft Visio or an open-source alternative to:



  • Update your initial diagram to create a final network diagram, incorporating at least four-fifths of the devices needed for a secure corporate network and citing specific, credible sources that support the design. Be sure to include vendor information, model information, and IP addresses. In addition, ensure that:

    • VPN sessions (from a laptop) are only allowed to access the desktops in the IT department by IT department employees.

    • All VPN connections from the Internet cloud into the corporate network terminate at the VPN server.

    • Users from Engineering and Finance and Accounting cannot communicate.

    • Vulnerability scans occur daily, with all desktops scanned at least once per day.




Submission Requirements


All diagrams and charts you create for the assignment should be included in the paper.

Answered 2 days After Oct 29, 2024

Solution

Shubham answered on Oct 31 2024
3 Votes
Intrusion Detection Systems: Types, Placement, and Integration with Firewalls
In the cu
ent cybersecurity landscape, Intrusion Detection Systems have become important component for organizations that aim to protect digital assets. An IDS is network appliance designed to monitor network traffic, malicious activities and alert administrators to potential threats (Boutaba, Salahuddin & Al-Shaer, 2022). As the nature of cyber threats has evolved, it includes IDS architectures and deployment strategies. It is placed between border router and firewall of network. IDS appear throughout corporate networks to enhance threat visibility and detection accuracy.
Types of Intrusion Detection Systems
Two primary types of IDSs are Network-based Intrusion Detection Systems (NIDS) and Host-based Intrusion Detection Systems (HIDS). Each has unique features and optimal use cases that allow organizations to adapt IDS deployment to meet specific security needs effectively.
Network-Based Intrusion Detection System (NIDS)
The Network-based IDS is system that monitors network traffic across an entire segment to detect malicious and abnormal activity. Positioned at strategic points within the network, it analyses data packets that travel across network infrastructure. It helps administrators to detect potential intrusions or harmful activities like Distributed Denial of Service attacks, malware propagation and unauthorized access attempts. According to NIST, NIDS can perform signature-based and anomaly-based detection. Signature-based NIDS rely on predefined patterns of malicious behaviour. It is highly effective at detecting known attack types that may struggle to identify zero-day attacks (Kamran & Nazir, 2021). On the other hand, anomaly-based NIDS use machine learning algorithms to detect deviations from normal network behaviour. Although anomaly-based detection can detect new and unusual activities that generates higher false positives.
Host-Based Intrusion Detection System (HIDS)
Host-based IDS operates on individual devices and endpoints like servers and workstations. HIDS monitors both inbound and outbound traffic as system-specific activities like file integrity checks, log analysis and process...
SOLUTION.PDF

Answer To This Question Is Available To Download

Related Questions & Answers

More Questions »

Looking For Homework Help? Get Help From Best Experts!

Copy and Paste Your Assignment Here