1. Distance Education Team 2 Security Architectures and Analysis

2. Distance Education Team Members Chris Rush – Team Leader, Step 1 Mike Gazdus – A/V Expert, Step 1 Ron Banerjee – Tech Analyst, Step 2 Russ Griffith – Tech Analyst, Step 2 Scott Currie – Scribe, Step 3 Chris Ameter – Tech Analyst, Step 3 Jack Pickett – Tech Analyst, Step 3 Raman Rangswamy – Tech Analyst, Step 4 Ayman Lugman – Tech Analyst, Step 4

3. Topics for Discussion Step 1 Recap Step 1 Recap DE User Categories DE User Categories DE Architecture DE Architecture Step 2 Goals Step 2 Goals Essential Services and Assets Essential Services and Assets Essential Usage Scenarios Essential Usage Scenarios Essential Scenarios Trace Essential Scenarios Trace Essential Components Essential Components What’s Next What’s Next

4. Step 1 Recap Status of admin server Status of admin server DE Organization Mission DE Organization Mission “To offer the same high quality MSE courses currently available to resident students, through the use of on-line, Computer Based Training (CBT), and two-way audio two-way video through Distance Education”. Mel Rosso-Llopart Director, Distance Education

5. DE User Categories Student Student Admin Staff Admin Staff Technical Support Staff Technical Support Staff Web Support Staff Web Support Staff Director & Associate Director Director & Associate Director

6. DE Architecture Admin DB (Oracle) Product DB (MySQL) Web App (Perl Scripts) DE Student Client (browser) DE Admin Client (Win32) Admin App (VB) Admin Server (Win NT) Product Server (Linux) Tech Support Admin Staff Student Web Support Director & AssocDirector Apache Server E-mail

7. Step 2 Goals Define essential service and assets Define essential service and assets - system capabilities that support the business mission mission - must be available despite intrusions Describe scenarios related to essential Describe scenarios related to essential services and assets services and assets - steps in essential service/asset usage Identify essential components Identify essential components - parts of architecture required by essential service and asset scenarios and asset scenarios

8. Essential Services & Assets Essential Services: Essential Assets: Tech support updates My SQL database Student access to web application Web support(Courseware specialist) perform maintenance on web applications. Student data Web contents: Calendars Class assignments Files Assigned readings

9. Essential Services/Asset Usage Scenarios EUS1: Access web application:  Logs on  Access web content like a class assignment page assignment page  Scroll to relevant area  Select and read information  Logs off Students: EUS2: Update My SQL database:  Logs on  Updates the database  Commits changes  Logs off Tech Support: Web Support: EUS3: Perform web application maintenance:  Logs on  Make changes to web contents  Save changes  Logs off

10. Essential Scenarios Trace My SQL Product Server Apache Server Web App (Perl Scripts) Client Browser Client Browser Product Server Apache Server Web App (Perl Scripts) Student: My SQL Web Application Product Server Web Support: Tech Support: Apache Server Web App (Perl Scripts) Product Server

11. Admin DB (Oracle) Product DB (MySQL) Web App (Perl Scripts) DE Student Client (browser) DE Admin Client (Win32) Admin App (VB) Admin Server (Win NT) Product Server (Linux) Tech Support Admin Staff Student Web Support Director & AssocDirector Apache Server Essential Scenarios Trace E-mail

12. Essential Components My SQL database My SQL database Web Application Web Application Product Server Product Server Apache Server Apache Server

13. What’s Next Discuss attacker profiles Discuss attacker profiles Discuss likely levels of attack Discuss likely levels of attack Discuss attack scenarios Discuss attack scenarios Identify “softspots” Identify “softspots”

14. Conclusion Discussed the DE Architecture Defined the user category Displayed the different architecture hardware and software components Discussed essential services and assets Defined essential services/assets usage scenarios Mentioned the essential components Briefly showed where we are going next.

15. Questions?