You are in charge of the security for a computer network for a large local high-school. The school has several requirements and constraints for the computer system:
– The data and user account system is based on servers running on-site at the school as the school has a very strict data protection policy prohibiting the use of cloud-based servers.
– The network needs to be lockdown-ready in case there is a flare-up of a disease-causing virus such as Covid-19. That means users should be able to access the network remotely (off-site) as well as locally (on-site).
– There are at least three types of users, namely, administrator, teacher and students. Different users have differing levels of access.
– Users need access in different ways, using tablets, mobile phones, desktop computers and laptops.
You are trying to convince the school’s governors to spend more money and staff time on computer security. You have decided that you are going to try to paint them a frightening picture of the computer security landscape.
Your submission to the school will be in the form of a report of up to 1500 words. In the report, you should
(1) identify THREE threats
(2) explain what might happen if the school’s network is attacked in that way
(3) suggest what they should do to defend against that specific attack and why that defense works.
Here are some places you might find information about common threats and solutions:
IEEE Security & Privacy
https://ieeexplore.ieee.org/xpl/RecentIssue.jsp?punumber=8013
IEEE Access
https://ieeexplore.ieee.org/xpl/RecentIssue.jsp?punumber=6287639
Kaspersky SecureList:
https://web.archive.org/web/20220527080756/https://securelist.com/it-threat-evolution-in-q1-2022-
non-mobile-statistics/106531/
https://web.archive.org/web/20220527080734/https://securelist.com/it-threat-evolution-in-q1-2022-
mobile-statistics/106589/
