NEWCASTLE UNIVERSITY
| ASSESSMENT 2022-23 |
CSC8414 Security Tools and Analysis
Submission deadline: Friday 13 January 2022, 11:45 pm
Submit your completed answer to the questions via NESS, as a pdf document.
Instructions:
Answer ALL questions
This assessment contributes 100% towards the total mark for this module. It is an individual exercise: no group work is required for the assessment.
Marks shown are indicative only
As for any University assessment, plagiarism will be considered as an assessment irregularity, and subject to disciplinary procedures. Please look at the guidelines:
In particular, be careful to cite properly bibliographic references. You can of course discuss your work with other students, but the work you submit must be individual.
Question 1 Videos of attack demonstrations (40%)
Learning Objective of the assessment
As a security analyst, you must able to conduct concrete attacks on the system you are analysing, to test if some vulnerabilities are present or not. You must be able to use the relevant security tools and to develop the adversarial mindset (i.e., thinking as an attacker).
Instructions
The Canvas module contains a number of attack demonstrations you must perform and record. Your report must indicate the URL where the videos can be found (Stream, Youtube), one video per attack. Indicative marks are 5 marks per video. The tools to be used for the attacks are covered in the lecture material.
Guidance on how to record your screen is provided on Canvas.
For this task, you will need to access the file telnet.pcap available on your Kali machine under Documents/Networks
Additional Setup:Navigate to /etc/php/7.4/apache2. Use sudo to modify php.ini to enable change the value for allow_url_include from off to on. Restart apache2.
Some developers might want to include files from other sources but without rigorous validation this is dangerous. We can provide a link to a shell stored on our own computer. One way of doing this assessment is to open a SimpleHTTPServer using python and include this file to the webserver. We can then listen to the included shell using netcat. This assessment will require research into reverse shells.
:How do we open either a bind or reverse shell using this vulnerability? This task is possible to or through using webshells available in kali in /usr/share/webshells.Describe the process you use.Once you gain a webshell, type the command whoami.What user are we using this shell through?
–-Some tips to help you:
When a website interacts directly with a database there is the potential for the injection of SQL code if proper validation is not used. One tool used to exploit these vulnerabilities is sqlmap, which is a sophisticated exploitation tool. For these questions, we expect you to use sqlmap to perform the sql injection but we also encourage you to read on what makes sql attacks possible.
One thing to keep in mind for these questions is that sqlmap does not know what your cookies are in your browser. Recall that you had to login to get to this point. Therefore, you will have to find a way to include your web browser cookies in the sqlmap command in order for sqlmap to work.
(a) choose the database you want to access. For example DVWA:
use dvw) may need to be used
sqlmap offers to attempt to guess hashed passwords. When sqlmap prompts an attempt on breaking hashes, do NOT accept this option as this dramatically increases the time taken to perform the attack and thus the length of the video.
Note:This assessment is solvable without the use of sqlmap. However, we expect you to use sqlmap. Solving this exercise without sqlmap is a good learning exercise and we would encourage you to do it for your own learning, but it is not required.
SQL Injection Q.1Use sqlmap to perform sql injection. Dump the database table entries. The end result of the attack should show the hashed passwords of all users.
Please ensure that your video showsthe hashed password of user 4.
Question 2 Security Analysis Methods (60%)
Learning Objective of the assessment
As a security analyst, you must be able to design and justify an analysis strategy when considering a system, before actually conducting the attack. You must take into account ethical and professional aspects and assess the potential effectiveness of the tools they want to use for a specific context.
Instructions
For each of the case studies below, design and justify a security analysis method in a report (400 words max per report). This report must be written as if you were asked by a client or stakeholder of a specific system to explain which security analysis method you would use for that specific system. Case studies might use systems and concepts not covered in the lecture material, thus mimicking the fact that no security analysist is aware of all systems existing in the wild. It is your responsibility to find information relevant to these systems. In some cases, you might have to make some assumptions on how these systems are organised or used. In this case, it is expected you will justify your assumptions based on your understanding of the context.
A formative group assessment with a simple case study will be released early in the module, to enable you to receive some feedback on writing the report.
Marking criteria for the analysis methods.
Each report is marked individually, following a marking scheme divided in the following categories:
Case study 1
A University is deploying a sensor network to transform their main building into a smart building, following the approach done at Newcastle University with the Urban Sciences Building and the Urban Observatory.
More specifically, the University will deploy 1000 sensors across the building, which will be wired using the KNX protocol to BACNet controllers, connected to the main building management system using the IP network already present in the building. The main objective of these sensors is to capture CO2 to analyse how the building is being utilised.
Describe a method to analyse the security of this network of sensors.
Case study 2:
To facilitate the management of sensors, the University deploys a Web Server allowing to register a new sensor, to monitor the status of existing sensors. The server is deployed as a virtual machine in the Azure infrastructure managed by the University. Networking only allows access to this server from machines located within the local network of the University. The server is based on a Ubuntu, with an Apache 2 server, running a MySQL database managed by PhP scripts.
Describe a method to analyse the security of this server.
Case study 3: Malware
Another University, which used a similar approach with dedicated sensors to monitor their campus, is suddenly attacked by a Ransomware Worm, which encrypts all the data on the sensors and ask for the University to pay a ransom in Bitcoin, threatening to brick the sensors.
The University is worried something similar might happen to the network of sensors described in the previous Case Studies.
Describe a method to analyse the risk of a ransomware attack.
Case study 4: Forensics
The University realises that the web-server described in Case Study 2 contains a large folder with a range of files, some seemingly containing confidential information related to the COVID-19 Vaccine research undertaken at the University, some being random images, some looking like random binary files.
Describe a method to forensically analyse the web-server.
Any academic writer who wishes to join our team of professional writers must possess all the following qualities:
To write an exemplary academic paper, you must have good critical thinking skills, possess the proper knowledge of the discipline, and be knowledgeable about applying an academic writing style.
As such we have a rigorous recruitment process. We only collaborate with professional academic writers. We believe in offering the highest quality academic writing services. Our writers pass various grammar and academic writing tests. They have to provide documents about their personal information and credentials to prove their level of expertise.
As a result, our clients receive papers that are thoroughly-researched, properly cited, and written within academic standards. We are proud that any academic writer from our writer's team can complete the paper at a high standard.
We work with the student’s budget because we know that students are usually on a budget majority of the time. We do not compromise on quality because of low prices. On the contrary, we love to foster a good relationship with our clients. That is why we charge our clients reasonable prices, and we are willing to negotiate and work with their budget.
It may be quite disturbing to decide whether to hire an academic writing company. We care about our client’s privacy and confidentiality. We never disclose your information to third parties. We never publish your paper online. You can use our academic writing service without any fear or anxiety.
Many students struggle with writing academic papers. Some barely have time to do their assignments because of their job and family responsibilities. Others have difficulty applying critical thinking skills or meeting time or assignment requirements. Whatever the reason is, you can always have time to do the things you love and other important things. All you need is a reliable and quality academic writing service. Unfortunately, even if you strongly desire to write the paper yourself, you sometimes face unexpected challenges. As we all know, life is unpredictable! Your teacher may be unconcerned about helping students and may not answer your questions. The good news is that there is a way out! You can hire an online academic writer to help you with your assignments. All you need to do is stipulate your paper requirements in the order form, and you can spend your time as you like.
Our company commits towards delivering high-quality custom papers to our clients. We seek to offer reliable essay writing services to our customers in various subject areas. Our customers are very valuable to us. As such, we commit to ensuring that they derive the utmost satisfaction from the essays we deliver. We have a mission to promote our clients' educational and professional lives by providing high-quality essays for their use. We also have a mission to offer a convenient essay writing system where our customers can easily order and pay for the services. We value quality and professionalism in our company.
We write papers on any subject area, and we also write various types of papers for various purposes. We have a team of able writers who are eager to help our customers with writing services of exceptional quality. We offer custom writing services for customers across the globe and charge affordable prices for our services. We are the best essay writing company offering personalized services to all our customers. We ensure our customers receive maximum satisfaction from the essays we deliver. Our website is the place to be if you are seeking high-quality essays.
By using our academic writing service, we match your paper subject with a writer with a degree in the subject. The writer is able to apply their skills, knowledge, and expertise to the paper. You receive an original, unique, well-research paper, properly cited and formatted. As such, you are assured of a high-quality paper.
Truth be told, writing assignments can be stressful and difficult for any student. There is no shame in getting academic writing help. When you search the term “get academic writing help” there are numerous sites that pop up on the results and our website is among them. So, why is it a great idea to choose us?
During your course, your instructor will assign various types of homework. Our academic writers can prepare essays, presentations, speeches, case studies, research papers, dissertations, thesis papers, and more. Our writer’s department is capable of tackling any assignment of any complexity easily. All you need is to give us detailed instructions to help our experts understand the task.After doing so, you can rest assured that everything is in control, and we will deliver a paper of unmatchable quality.
Are you a college or university student pursuing your Bachelor’s , Masters, PhD, or Doctorate degree? Sometimes juggling schoolwork with work, family and hobbies can seem like a daunting task. You have to sacrifice one or the other. The sole purpose of our website is to alleviate your academic burdens. We ensure that you do not fail in your classes and you get good grades consistently. We understand that there is a need for academic help.
We acknowledge that our clients are not dumb or lazy but only need academic life need help in order to live a balanced life and make ends meet. We make it our core priority to ensure that all assignments are done and submitted before the stipulated deadlines. All our writers are graduates. They are competent in handling the clients’ assignments. We step in to help you with any and all of your assignments. Our assignment help service ensures that you never miss a grade or deadline.
Students barely have time to read. We got you! Have your literature essay or book review written without having the hassle of reading the book. You can get your literature paper custom-written for you by our literature specialists.
Do you struggle with finance? No need to torture yourself if finance is not your cup of tea. You can order your finance paper from our academic writing service and get 100% original work from competent finance experts.
Computer science is a tough subject. Fortunately, our computer science experts are up to the match. No need to stress and have sleepless nights. Our academic writers will tackle all your computer science assignments and deliver them on time. Let us handle all your python, java, ruby, JavaScript, php , C+ assignments!
While psychology may be an interesting subject, you may lack sufficient time to handle your assignments. Don’t despair; by using our academic writing service, you can be assured of perfect grades. Moreover, your grades will be consistent.
Engineering is quite a demanding subject. Students face a lot of pressure and barely have enough time to do what they love to do. Our academic writing service got you covered! Our engineering specialists follow the paper instructions and ensure timely delivery of the paper.
In the nursing course, you may have difficulties with literature reviews, annotated bibliographies, critical essays, and other assignments. Our nursing assignment writers will offer you professional nursing paper help at low prices.
Truth be told, sociology papers can be quite exhausting. Our academic writing service relieves you of fatigue, pressure, and stress. You can relax and have peace of mind as our academic writers handle your sociology assignment.
We take pride in having some of the best business writers in the industry. Our business writers have a lot of experience in the field. They are reliable, and you can be assured of a high-grade paper. They are able to handle business papers of any subject, length, deadline, and difficulty!
We boast of having some of the most experienced statistics experts in the industry. Our statistics experts have diverse skills, expertise, and knowledge to handle any kind of assignment. They have access to all kinds of software to get your assignment done.
Writing a law essay may prove to be an insurmountable obstacle especially when you need to know the peculiarities of the legislative framework. Take advantage of our top-notch law specialists and get superb grades and 100% satisfaction.
$10 page
$13 page
$14 page
Our prices depend on the urgency of your assignment, your academic level, the course subject, and the length of the assignment. Basically, more complex assignments will cost more than simpler ones. The level of expertise is also a major determinant of the price of your assignment.
If you need professional help with completing any kind of homework, is the right place to get it. Whether you are looking for essay, coursework, research, or term paper help, or with any other assignments, it is no problem for us. At our cheap essay writing service, you can be sure to get credible academic aid for a reasonable price, as the name of our website suggests. For years, we have been providing online custom writing assistance to students from countries all over the world, including the US, the UK, Australia, Canada, Italy, New Zealand, China, and Japan.
Our cheap essay writing service has already gained a positive reputation in this business field. Understandably so, since all custom papers produced by our academic writers are individually crafted from scratch and written according to all your instructions and requirements. We offer APA, MLA, or a Chicago style paper in almost 70 disciplines. Here, you can get quality custom essays, as well as a dissertation, a research paper, or term papers for sale. Any paper will be written on time for a cheap price.
Using our cheap essay writing help is beneficial not only because of its easy access and low cost, but because of how helpful it can be to your studies. Buy custom written papers online from our academic company and we won't disappoint you with our high quality of university, college, and high school papers. Although our writing service is one of the cheapest you can find, we have been in the business long enough to learn how to maintain a balance between quality, wages, and profit. Whenever you need help with your assignment, we will be happy to assist you.
It might seem impossible to you that all custom-written essays, research papers, speeches, book reviews, and other custom task completed by our writers are both of high quality and cheap. It is surprising, but we do have some tricks to lower prices without hindering quality.
To start using our services, it’s enough to place a request like “I need a writer to do my assignment” or “Please, write an essay for me.” We have a convenient order form, which you can complete within minutes and pay for the order via a secure payment system. The support team will view it after the order form and payment is complete and then they will find an academic writer who matches your order description perfectly. Once you submit your instructions, while your order is in progress and even after its completion, our support team will monitor it to provide you with timely assistance.
Hiring good writers is one of the key points in providing high-quality services. That’s why we have entry tests for all applicants who want to work for us. We try to make sure all writers working for us are professionals, so when you purchase custom-written papers, they are of high quality and non-plagiarized.
Our cheap essay writing service employs only writers who have outstanding writing skills. The quality of all custom papers written by our team is important to us; that is why we are so attentive to the application process and employ only those writers who can produce great essays and other kinds of written assignments. All our writers are graduates. They are competent in handling the clients’ assignments. We step in to help you with any and all of your assignments. Our assignment help service ensures that you never miss a grade or deadline.
All our cheap essays are customized to meet your requirements and written from scratch. Our writers have a lot of experience with academic papers and know how to write them without plagiarism. Moreover, at our academic service, we have our own plagiarism-detection software which is designed to find similarities between completed papers and online sources. You can be sure that our custom-written papers are original and properly cited.
Our essay writing service has a 0% plagiarism tolerance. We are well aware of the dangers of plagiarism. Plagiarism is academic suicide. Our essay writing service ensures that all papers are original. We do not sell pre-written papers. All papers are written from scratch as per the instructions. We pass our papers through powerful anti-plagiarism software such as SafeAssign and TurnItIn.
Our cheap essay writing service tries to always be at its best performance level, so each customer who pays money for paper writing can be sure that he or she will get what is wanted. On the off chance that you don’t like your order, you can request a refund and we will return the money according to our money-back guarantee.
There can be a number of reasons why you might not like your order. If we honestly don’t meet your expectations, we will issue a refund. You can also request a free revision, if there are only slight inconsistencies in your order. Your writer will make the necessary amendments free of charge. You can find out more information by visiting our revision policy and money-back guarantee pages, or by contacting our support team via online chat or phone.
We know how important any deadline is to you; that’s why everyone in our company has their tasks and perform them promptly to provide you with the required assistance on time. We even have an urgent delivery option for short essays, term papers, or research papers needed within 8 to 24 hours.
We appreciate that you have chosen our cheap essay service, and will provide you with high-quality and low-cost custom essays, research papers, term papers, speeches, book reports, and other academic assignments for sale. We beat all deadlines. We can also handle urgent orders with deadlines as short as 1 hour. Our urgent paper writing service does not compromise on quality due to the short deadline. On the contrary, our essay writers have a lot of experience which comes in handy in such situations.
We provide affordable writing services for students around the world. That’s why we work without a break to help you at any time, wherever you are located. Contact us for cheap writing assistance. Our impeccable customer support team will answer all your questions and help you out with any issues.
Proceed to order pageDelivering a high-quality product at a reasonable price is not enough anymore.
That’s why we have developed 5 beneficial guarantees that will make your experience with our service enjoyable, easy, and safe.
You have to be 100% sure of the quality of your product to give a money-back guarantee. This describes us perfectly. Make sure that this guarantee is totally transparent.
Read moreEach paper is composed from scratch, according to your instructions. It is then checked by our plagiarism-detection software. There is no gap where plagiarism could squeeze in.
Read moreThanks to our free revisions, there is no way for you to be unsatisfied. We will work on your paper until you are completely happy with the result.
Read moreYour email is safe, as we store it according to international data protection rules. Your bank details are secure, as we use only reliable payment systems.
Read moreBy sending us your money, you buy the service we provide. Check out our terms and conditions if you prefer business talks to be laid out in official language.
Read more