Fluent Essays

Based on an executive level report, deliver the findings of the Topic 4 Demonstrating the Gap assignment. Include the following in your report (add sections to the template as needed): An overview of why the report is being written A paragraph description of the system A paragraph outlining the framework governing the enterprise Major gaps that were found Remediation that is recommended A high-level diagram that represents the current state of the system An equal diagram depicting the proper end state Refer to the Security Assessment Report (SAR), within the required readings. This resource provides detailed explanations of each section that should be included within the assessment report.  APA style is not required, but solid academic writing is expected. Refer to the System Security Assessment Report Template and the Framework Findings and Recommendations Scoring Guide, prior to beginning the assignment to become familiar with the expectations for successful completion. You are not required to submit this assignment to LopesWrite. This benchmark assignment asses the following programmatic competencies: MS Cybersecurity  2.1: Establish a risk management framework using industry standards for compliance. MS Information Assurance and Cybersecurity 1.5: Establish a risk management framework using industry standards for compliance. NETWORK DESIGN 2 Network Design Ivie, Omobhude Grand Canyon University CYB 535—0500 Policy Management for Security Solutions August 10, 2021 Running head: NETWORK DESIGN 2 Introduction The Network Diagram explains how Firewalls, IDS/IPS, DMZ, Vlans, Border and Gateway routers, private IP addressing, Isolated Server Subnets, Network Access Control, and VPN concentrators are designed. It is critical to have each of these devices and know where to place them within the organization. Also, explain and justify the secure network design of the elements and provide details of the layered security in the diagram. I have created a network diagram that explains how to make the design by knowing where to place devices like corporate firewalls, routers, the IPS, and others in the network. As usual, it is paramount to have every device placed in its correct and respective places in the network designed for the enterprise. The security for the network design has been explained, and how the layered security has been implemented in the system. In the network diagram that I have drawn, the cloud will be included to start with, in which we have two routers connected to it. One Router will be given an IP address to connect to the security device that is DMZ as subnet 1 in our case. Router number two associated will be given an IP address but in this case for connecting to the VPN, which acts as the second subnet. We will have a firewall in the VPN concentrator and other various devices in which each device will have a private IP address set as class B and will be made on every device. In the DMZ device, we shall include a corporate firewall and an IPS after that firewall. This helps in detecting data that is coming through the DMZ security device. We will also have layer(3) switches in the DMZ consisting of different servers. The servers will have a web server, and as well there will be another firewall after the servers and another IPS subnet after the corporate firewall. When out of the DMZ area, we will have gateway Routers that will help send packets within the autonomous system. The second Router will connect another switch layer that will connect to different departments same case to the other routers. Each department after that will have a wireless access network design. The elements in the diagram It will be within the DMZ where the data is stored. The next element would be using the presentation layer of data encryption that translates the application to the network. Users will send a MPEG, JPEG, and TIFF data encryption within the DMZ. Another element would be the session layer that manages the connection. This is provided in the DMZ, which will have to deal with a SQL program. The Transport layer is another element in the diagram, and it would be part of the Border Gateway Router. The Network Layers next element, all the routing in the Border Gateway Router (BGR), will connect and send packets. The data link will have the packets in the BGR from the physical layer. The next element is the Physical Layer which would have all the mechanical devices send to the DMZ. The transport layer is another session that usually acts as a border and gateway in Router through the packet sent in the network. The packet layer is where the packet is contained and is usually from the physical layer. The physical layer is usually the last layer which deals which all mechanical devices Enterprise network framework based on NIST · Identification: In this part, the enterprise network implements a risk assessment strategy. · Protection: The enterprise executes the network access control to ensure that access is denied for unknown or known attackers and only authorized devices can access the network. The network has a firewall, DMZ, to protect from intrusion. · Detection: The IPS enabled in the network is used to perform detection during an intrusion · Respond: In this part of the framework, the enterprise makes the response plan by analysis and mitigation. · Recovery: It includes communication, recovery planning such that the enterprise can improve its current situation. Diagram description This network system has been implemented to support and improve security in the enterprises network. Some of the various security devices used in the system are DMZ, the corporate firewall, and three-layer switches. These devices ensure the security required by the network implemented in this enterprise and its various departments. Below is the implementation diagram of our network References Ferraiolo, D. F., Sandhu, R., Gavrila, S., Kuhn, D. R., & Chandramouli, R. (2001). Proposed NIST standard for role-based access control. ACM Transactions on Information and System Security (TISSEC), 4(3), 224-274. Shen, L. (2014). The NIST cybersecurity framework: Overview and potential impacts. Scitech Lawyer, 10(4), 16. QUANTIFYING A NETWORK USING NMAP 2 Quantifying a System Ivie, Omobhude Grand Canyon University CYB 535—0500 Policy Management for Security Solutions July 20, 2021 Running head: QUANTIFYING A NETWORK USING NMAP 2 NMAP is a network mapper that makes it easy to detect changes and new systems on the network. Typically, it is used in host delivery, port scanning, version detection, and OS detection. In this case, I am using the Nmap software to quantify my home network on my pc. I am using the Windows operating system; therefore, below are the steps on installing and configuring Nmap GUI software on the Windows operating system. How hackers will try to have access to the network The Hacker will identify the system network ports that are active. If the network ports are vulnerable, they have got a backdoor, and then the Hacker will use the address to scan the ports on my home network. The Hacker will get the information of the system by conducting passive footprinting. Guidance in Installation and configuration of NMAP software in windows operating system; Step 1 – Browse to https://nmap.org/download.html and download the latest self-installer Step 2 – Run the downloaded .exe file. In the window that opens, accepts the license terms; Step 3 – Choose the components to install. By default, the Zenmap GUI will be installed; Step 4 – Select the install location and click install Step 5 – The Installation should be completed in a couple of minutes. The number and type of system attached to the system network Below I have taken a screenshot to show the number of devices and the type of system attached to my network; From the above image it has been found that; · Fifteen(15) devices have been connected to my network system and, at the same time switched on. · Some of the clear devices include; Raspberry Pi Foundation, Amazon technologies device, Samsung device, devices manufactured by Dell, laptop, and PC. The Avaya device, Liteon technology, and Elite Group computer system some of which you need to look into to see them. Some devices are unknown and require one to perform a deep scan to the network system to identify them. What is on the network I have connected raspberry pi directly to my network system that I have just implemented. Who is on the network The Samsung device which someone is using is connected to the network system that I have just implemented, and this means that already someone is using my network that I implemented. The Policies implemented The organizations network policy is to keep track of the devices connected to the network, who is on their network. By knowing this, the organizations detect the device or person that is suspect to impact the network. In addition, the network policy describes an organizations security control. This aims to keep malicious users out while mitigating risky users within the home network organization. Finally, the security policy defines the policies that will be enforced. References  Medeiros, João Paulo S.; Brito Jr., Agostinho M.; Pires, Paulo S. Motta (2009). Computational Intelligence in Security for Information Systems. Advances in Intelligent and Soft Computing. 63. pp. 1–8. doi:10.1007/978-3-642-04091-7_1. ISBN 978-3-642-04090-0. Haines, J.; Ryder, D.K.; Tinnel, L.; Taylor, S. (2003-02-19). Validation of sensor alert correlators. IEEE Security & Privacy. 99 (1): 46–56. doi:10.1109/MSECP.2003.1176995. F. Mansmann, D. Keirn, S. North, B. Rexroad and D. Sheleheda, Visual analysis of network traffic for resource planning interactive monitoring and interpretation of security threats, IEEE Transactions on Visualization and Computer Graphics, vol. 13, no. 6, pp. 1105-1112, Nov 2007 F. V. Paulovich, L. G. Nonato, R. Minghim and H. Levkowitz, Least square projection: A fast high-precision multidimensional projection technique and its application to document mapping, IEEE Transactions on Visualization and Computer Graphics, vol. 14, no. 3, pp. 564-575, 2008.