In this project, you’ll create a security infrastructure design document for a fictional organization. The security services and

Question

1 month ago

9

In this project, you’ll create a security infrastructure design document for a fictional organization. The security services and

tools you describe in the document must be able to meet the needs of the organization. Your work will be evaluated according to how well you met the organization’s requirements. About the organization: This fictional organization has a small, but growing, employee base, with 50 employees in one small office. The company is an online retailer of the world's finest artisanal, hand-crafted widgets. They've hired you on as a security consultant to help bring their operations into better shape. Organization requirements: As the security consultant, the company needs you to add security measures to the following systems: An external website permitting users to browse and purchase widgets An internal intranet website for employees to use Secure remote access for engineering employees Reasonable, basic firewall rules Wireless coverage in the office Reasonably secure configurations for laptops.
The following elements should be incorporated into your plan:
Authentication system
External website security
Internal website security
Remote access solution
Firewall and basic rules recommendations
Wireless security
VLAN configuration recommendations
Laptop security configuration
Application policy recommendations
Security and privacy policy recommendations
Intrusion detection or prevention for systems containing customer data

Computers and Technology

1 answer:

ivann1987 [930] · Answer 1 · 2026-02-25T11:02:46+03:00

Answer and explanation:

Authentication:

Authentication is achieved by entering a user ID and password, utilizing social sign-ins, or employing biometric methods. It serves to confirm the identity of the user and allow them access.

Here’s how authentication functions:

Prompt the user to provide their credentials.

Transmit these credentials to the authentication server.

Verify the credentials.

Grant access to the user upon successful match.

External Website Security:

It is crucial to safeguard the website from hackers and unauthorized users to avert any security issues.

Implement firewalls.

Establish access controls.

Utilize MVC (Model View Controller) to create different views tailored for various user types.

Employ encryption techniques.

Utilize SSL certificates.

Employ security plugins.

Adopt strategies for backup and disaster recovery.

Engage a network monitoring team.

Internal Website Security:

Use authentication to verify user identities.

Utilize authorization to assign specific privileges and access to different users.

Conceal or encrypt sensitive web pages.

Implement IT policy frameworks.

Educate users about the website.

Remote Access Solution:

Remote access enhances security, cost-effectiveness, management simplicity, and availability.

This can be set up using RAS gateways (either single or multi-tenant):

Remote access options include VPN (Virtual Private Network), BGP (Border Gateway Protocol), and Hyper-V networks.

This access can be configured simply. It includes enabling users, managing their access, securing assets, using remote desktop protocols, and overseeing sessions including RemoteApp and both personal and pooled desktops.

Firewall and Basic Rules Recommendations:

Firewalls are essential for traffic management and securing external websites.

Establish rules to prevent SQL injection and XSS.

Permit only specific traffic types.

Apply access rules for IP security.

Implement defined IT policies.

Users can create custom rules.

Wireless Security:

In today's landscape, Wi-Fi is prevalent in organizations and protects the network from harmful and unauthorized access.

Wireless security can be enhanced through encryption, decryption, and processes for authentication and authorization.

VLAN Configuration:

VLANs are critical for filtering traffic and logically dividing the network.

VLANs can be configured for web interfaces, facilitating web filtering.

The configuration for VLANs in a web interface can be done as follows:

Switching => VLAN => Advanced => VLAN Membership

Switching => VLAN > Advanced => Port PVID Configuration.

For VLAN web filtering:

VLANs can be interconnected between routers, firewalls, or switches to filter web traffic traversing the network.

Laptop Security Configuration:

Security for laptops can be achieved using passwords, VPNs, and MAC address registration. Employing security tools on local machines is also advisable. Device-level authentication via local usernames and passwords is a beneficial approach.

Application Policy Recommendations:

Application policies encompass the use of cookies, social media integration, access control, notification generation, and adherence to other organizational and IT guidelines.

Security and Privacy Policy Recommendations:

This includes a catalogue of security methods necessary for managing traffic filtering, IP spoofing, user authentication, and other specific website policies.

Intrusion Detection or Prevention for Systems with Customer Data:

IPS operates behind firewalls and reviews incoming traffic against security policies, matching signatures and managing any incidents while generating logs and alerts. The goal of IDS is to detect harmful traffic ahead of it penetrating further into the network, providing necessary alerts and notifications to the monitoring team. Opting for anomaly-based detection and prevention systems is recommended.