Reference no: EM134014129 , Length: Word Count:700
Network and Information Security
Assessment Details
Introduction
This group assessment, consisting of two parts, Project Report and Project Demonstration.
This group project requires teams of 3-4 students to design, implement, and demonstrate an advanced network security solution. You will focus on enhancing your pfSense firewall with a robust Intrusion Detection and Prevention System (IDPS) using Snort. Concepts related to Data Communication And Networking and Computer System Architecture are highly relevant for configuring and securing virtual network environments.
The group leader will submit the Project Report to the LMS. The rest of the group members should submit the "Individual participation form".
The group will prepare a face-to-face presentation to demonstrate the system's defenses. The group leader will also submit the Project PowerPoint presentation to the LMS. The rest of the group members should submit the "Individual participation form".
Project Report
1. Advanced IDPS Configuration (Building on Labs 5-7)
Extend your existing pfSense setup from previous labs with advanced Snort configurations.
Develop custom Snort rules tailored to detect specific threats relevant to your virtual network environment, including emerging threats such as IoT-based attacks or DDoS attacks prevalent in 2025.
Implement and configure Snort templates to enhance detection capabilities.
Document your network topology, including all virtual machines and network configurations.
Create detailed documentation of your custom Snort rules, explaining their purpose and functionality.
Provide screenshots of your experiments.
Knowledge of Software Engineering practices can support the documentation, testing, and implementation processes required for this project.
2. IDPS Testing and Validation
Develop comprehensive test cases to validate the effectiveness of your Snort rules.
Simulate various attack scenarios, including complex multi-stage attacks or lateral movement within the virtual network, to trigger your Snort rules and demonstrate the IDPS's detection and prevention capabilities.
Capture and analyze Snort logs and alerts to evaluate the performance of your IDPS.
Document the test cases, attack simulations, and analysis of Snort logs and alerts.
Provide screenshots of your experiments.
3. Project Report and Documentation
Compile a comprehensive report that includes:
Network topology and configurations.
Detailed documentation of custom Snort rules and templates.
Test cases, attack simulations, and analysis of Snort logs and alerts.
Analysis of the effectiveness of the implemented security measures.
Discussion of challenges encountered and solutions implemented.
Screenshots of your experiments.
Ensure the report is well-organized, clearly written, and professionally formatted. Applying concepts from Computer Science studies can assist in presenting technical findings effectively.
Project Demonstration (Group)
Face-to-Face Presentation and Demonstration
Prepare a face-to-face presentation to demonstrate the working defenses of your system.
Showcase the functionality of your custom Snort rules and the IDPS's ability to detect and prevent emerging and complex attack scenarios.
Be prepared to answer questions from the instructor and classmates.
Each member of the group must actively participate in the presentation and demonstration.
The report should have a consistent, professional, and well-organized appearance. Also:
The total word count of the report must be between 2,000 and 2,500 words.
*Note: You just need to do this only
Testing, Attack Simulation & Log Analysis
Responsibilities:
* Perform attack simulations
* Test whether Snort detects attacks properly
* Run different scenarios:
* Port scans
* DDoS simulation
* Lateral movement
* Suspicious traffic
* Capture Snort alerts and logs
* Analyze effectiveness of the IDPS
Deliverables:
* Test cases
* Attack simulation evidence
* Log analysis screenshots
* Results and findings