As an employee, your line manager has assigned you the responsibility of analysing the network design and developing a threat model to identify any potential threats or vulnerabilities before the design is finalised and
Assessment Description As an employee, your line manager has assigned you the responsibility of analysing the network design and developing a threat model to identify any potential threats or vulnerabilities before the design is finalised and equipment/software is procured. To evaluate the network design, you must use a threat model. Your line manager has asked that you follow the Microsoft STRIDE Threat Model for this. The outline of the planned network is included in Appendix A.
Guidance on Format of Assessment Please do not include this assessment brief with the assessment submission.
Task 1: Technical Report Introduction o Include overview of assessment with aim and objectives. Overview of the network and requirements. o Create and include a network diagram based on the design requirements in Appendix A. STRIDE and Methodology o Provide a definition of STRIDE and discuss the process that you will follow, what is your methodology for this threat modelling. Threats and/or vulnerabilities of the network found using STRIDE o Discuss the threats identified using STRIDE against the proposed network. Tables of the types of threats would be beneficial here. Hardening solutions o Provide hardening solutions and recommendations to any potential threats or vulnerabilities that have been identified (5 maximum) Summary of your findings o Present key information to the client Use bullet points Keep it brief but to the point and make sure it is clear to management in an understandable way (not too much technical details here, these would be in your hardening section) Learning Outcomes Assessed LO1 Use threat models and other tools to identify and describe attack methodologies, tools and techniques LO2 Design, implement, configure and evaluate security measures to defend computer systems against a range of attacks
