You will select an organization, and apply your research to the analysis and development of a network design that would be appropriate for the organization and the needs that it has for its network. Additional information and the deliverables for each Individual Project will be provided in the assignment description for the project. This is the course’s Key Assignment that you will make contributions to each week.

Project Selection:

The first step will be to select an organization as the target for your network design and architecture proposal document. This organization will be used as the basis for each of the assignments throughout the course and should conform to the following guidelines:

· Nontrivial: The selected organization should be large enough to allow reasonable exercise of the network design process.

· Domain Knowledge: You should be familiar enough with the organization to allow for focus on the project’s tasks without the significant time required for domain education.

· Accessibility: You should have good access to the people and other information related to the organization because this will be an important part of the process.

The selected organization may already have a distributed network in place, but it can still be used as the basis for the projects in this course.

The selected organization must have a need for some kind of distributed network computing as part of their operations. Therefore, you may identify a hypothetical organization that meets these requirements. Any necessary assumptions may be made to fulfill the requirements of organization selection process.

Select an existing organization, or identify a hypothetical organization that fits these requirements, and submit your proposal to your instructor before proceeding with the assignments in the course. Approval should be sought within the first several days of the course. Your instructor will tell you how to submit this proposal and what notification will be given for project approval.

Assignment:

For the assignments in this course, you will not be implementing a distributed network, but you will be developing a comprehensive network design and architecture proposal document. Your first task in this process will be to select an organization or identify a hypothetical organization to use as the basis of your project. You will also create the shell document for the final project deliverable that you will be working on during each unit. As you proceed through each project phase, you will add content to each section of the final document to gradually complete the final project deliverable. Appropriate research should be conducted to support the development of your proposal document, and assumptions may be made when necessary.

The project deliverables are as follows:

· Submit the organization proposal to your instructor for approval.

· Submit the network design and architecture proposal document shell

· Use Word

· Title page

· Course number and name

· Project name

· Student name

· Date

· Table of contents

· Use autogenerated TOC

· Separate page

· Maximum of 3 levels deep

· Be sure to update the fields of the TOC so it is up-to-date before submitting your project.

· Section headings (create each heading on a new page with TBD as content except for sections listed under new content below)

· Project Outline

· Distributed Network Requirements Analysis

· Communication Protocols Analysis and Recommendations

· Network Traffic Analysis and Recommendations

· Network Design and Architecture

· Future Needs Analysis and Recommendations

PART I (4 pages)

Project outline and requirements

· Brief description of the organization (can be hypothetical) where the network will be implemented

· Include company size, location(s), and other pertinent information.

· Summary of the benefits that the company would realize through distributed networking

· Material can be taken from the approved proposal that was submitted to the instructor.

· Ensure that this project is approved by the instructor.

Distributed network requirements analysis

· Describe at least 5 major areas of functionality needed by the organization that can be provided through distributed networking.

· For each area of functionality, include information to identify capacity and performance requirements.

· Identify connectivity and security requirements for the proposed network.

· Include any other requirements that will affect your design and architecture, such as the use of existing network infrastructure, budget limitations, existing applications and operating systems, and so forth.

Name the document yourname_CS635_IP1.doc.

PART II (3 pages)

The Communication Protocols Analysis and Recommendations section should include the following:

Analysis:

· For each of the requirements identified in the Requirements Analysis section of the previously created proposal, list and describe the communication protocol(s) that are necessary to support the requirement.

· Include a description of which parts of the network and network applications would utilize the protocol(s).

Recommendations:

· Based on the analysis that was performed in the previous step, prepare a recommendation for protocol(s) to use with the network.

· Justify the selection of these protocol(s) by using a description of the operational characteristics that best match the analysis results.

Be sure to update your table of contents before submission.

Name the document yourname_CS635_IP2.doc.

PART III (3 pages)

Update the network design and architecture proposal document title page with new date and project name.

Update the previously completed sections based on instructor feedback.

Network Traffic Analysis and Recommendations section:

Analysis:

· Summarize each of the major uses of the distributed network.

· For each use, identify the traffic estimates.

· Include an analysis of peak traffic times and levels.

· Identify any other issues that will produce congestion on the network.

Recommendations:

· Based on the analysis that you performed in the previous step, prepare a recommendation of the software and infrastructure that would be required to handle the projected traffic.

· Offer recommendations for software that can be used to manage potential network congestion, and describe how the software works.

Update your table of contents before submission.

Name the document yourname_CS635_IP3.doc.

PART IV (3 pages)

Update the network design and architecture proposal document’s title page with new date and project name.

Update the previously completed sections based on instructor feedback.

The Network Design and Architecture section should include the following:

Infrastructure:

· Describe the network architecture that is suitable for this distributed network.

· Include at least 1 visual model of the system that identifies the major components.

· Justify the physical design of the system with reference to the requirements established in previous sections of the proposal.

· Summarize the estimated cost of the network infrastructure.

Software:

· Describe the software required for the network.

· Include the operating systems and other software applications that are required to meet the functional and operational requirements established in previous sections of the proposal.

· Summarize the estimated cost of the network software.

Name the document yourname_CS635_IP4.doc.

PART V (3 pages)

Update the network design and architecture proposal title page with new date and project name.

Update the previously completed sections based on instructor feedback.

The Future Needs Analysis and Recommendations section should include the following:

· Research current and future trends in distributed networking.

· Summarize at least three potential changes in distributed networking that might affect your company.

· Provide a modified design and architecture, and discuss the changes from the original design proposal that would be required to support the new requirements.

Network design and architecture proposal

· Review the entire document for any changes and improvements you would like to make.

· Ensure this final version of the plan is sufficiently detailed to allow the organization to confidently move forward with a distributed network implementation that is based on your recommendations.

Any previous instructor feedback should be addressed with appropriate changes.

Update your table of contents before submission.

Name the document “yourname_CS635_IP5.doc.”

Each part at least 2 REFERENCES + Citation, Please don’t use wiki not allow us to use it.

Do you need a similar assignment done for you from scratch? Order now!
Use Discount Code "Newclient" for a 15% Discount!

You are the manager of an information technology (IT) team. Your employees go to training workshops and national conferences to keep up-to-date in the field. You created a list of expenses by category for each employee for the last six months. Now you want to subtotal the data to review total costs by employee and then create a PivotTable to look at the data from different perspectives.

Steps to Perform:

Step

Instructions

Points Possible

1

Start Excel. Download and open the file named Exp19_Excel_Ch05_CapAssessment_Travel.xlsx.   Grader has automatically added your last name to the beginning of the   filename.

0

2

Before using the Subtotal   command, you must first sort the data.
On the Subtotals worksheet, sort the data by Employee and further sort by   Category, both in alphabetical order.

4

3

You want to subtotal the data to calculate expenses by   employee.
Use the Subtotals feature to insert subtotal rows by Employee to calculate   the total expense by employee.

6

4

Now you want to hide the details   for two employees and focus on details for the remaining employees.
Collapse the Davidson and Miller sections to show only their totals. Leave   the other employees’ individual rows displayed.

5

5

For more detailed analysis, you are ready to create a   PivotTable.
Use the Expenses worksheet to create a blank PivotTable on a new worksheet   named Summary.   Name the PivotTable Categories.

8

6

You want to include the Category   and Expense fields in the PivotTable.
Use the Category and Expense fields, enabling Excel to determine where the   fields go in the PivotTable.

5

7

You want to display average expenses instead of totals.
Modify the Values field to determine the average expense by category. Change   the custom name to Average Expense.

4

8

Format the Values field with   Accounting number type.

4

9

You want to display a meaningful label and select a   different layout.
Type Category   in cell A3 and change the Grand Totals layout option to On for Rows Only.

5

10

Apply Light Blue, Pivot Style   Dark 2 and display banded rows.

5

11

To make it easy to filter the PivotTable results, you will   insert and format a slicer.
Insert a slicer for the Employee field, change the slicer height to 2   inches and apply the Light Blue, Slicer Style Dark 5. Move the slicer so that   the upper-left corner is in cell A10.

6

12

You want to insert another   PivotTable to analyze the data on the Expenses worksheet.
Use the Expenses worksheet to create another blank PivotTable on a sheet   named Totals.   Name the PivotTable Employees. Add the Employee to the Rows and   add the Expense field to the Values area. Sort the PivotTable from largest to   smallest expense.

10

13

Change the name for the Expenses column to Totals   and format the field with Accounting number format.

6

14

Insert a calculated field to   subtract 2659.72   from the Totals field. Change the custom name to Above or Below Average and   apply Accounting number format to the field.

10

15

Set 10.86 (approximate) as the width for column   B and 13.71   for column C, change the row height of row 3 to 30, and apply word wrap to   cell C3.

4

16

Now, you want to create a   PivotChart to depict the data visually.
Create a clustered column PivotChart from the PivotTable. Move the PivotChart   to a new sheet named Chart. Hide all field buttons in the   PivotChart, if necessary.

8

17

Add a chart title above the chart and type Expenses by   Employee. Change the chart style to Style 14.

2

18

Apply 11 pt font size to the   value axis and display the axis as Accounting with zero decimal places.

4

19

Create a footer on all worksheets with your name in the   left section, the sheet name code in the center section, and the file name   code in the right section.

4

20

Ensure that the worksheets are   correctly named and placed in the following order in the workbook: Subtotals,   Summary, Chart, Totals, Expenses.

0

21

Save and close Exp19_Excel_Ch05_CapAssessment_Travel.xlsx.   Exit Excel. Submit the file as directed.

0

Do you need a similar assignment done for you from scratch? Order now!
Use Discount Code "Newclient" for a 15% Discount!

A network consisting of M cities and M-1 roads connecting them is given. Cities are labeled with distinct integers within the range [o. (M-1)] Roads connect cities in such a way that each pair of distinct cities is connected either by a direct road or along a path consisting of direct roads. There is exactly one way to reach any city from any other city. In other words, cities and direct roads form a tree. The number of direct roads that must be traversed is called the distance between these two cities. For example, consider the following network consisting of ten cities and nine roads: 2 0 Cities 2 and 4 are connected directly, so the distance between them is 1. Cities 4 and 7 are connected by a path consisting of the direct roads 4-0,0-9 and 9-7; hence the distance between them is 3. One of the cities is the capital, and the goal is to count the number of cities positioned away from it at each of the distances 1,2,3,.., M -1. If city number 1 is the capital, then the cities positioned at the various distances from the If city number 1 is the capital, then the cities positioned at the various distances from the capital would be as follows: . 9 is at a distance of 1 · 0, 3, 7 are at a distance of 2; 8,4 are at a distance of 3; 2, 5, 6 are at a distance of 4. Write a function: class Solution t public int[] solution(int[] T)h that, given a non-empty array T consisting of M integers describing a network of M cities and M 1 roads, returns an array consisting of M-1 integers, specifying the number of cities positioned at each distance 1, 2,…, M – 1. Array T describes a network of cities as follows: · if T[P] Q and P = Q, then P is the capital; if T[P Q and P Q, then there is a direct road between cities P and Q. For example, given the following array T consisting of ten elements: T[2] 4 T[6]8 T[9] = 1 = 9 T[7] the function should return [1, 3, 2,3,0,0,0,0,01, as explained above. Write an efficient algorithm for the following assumptions: M is an integer within the range [1..100,000]; each element of array T is an integer within the range [0.M-1] there is exactly one (possibly indirect) connection between any two distinct cities.

Do you need a similar assignment done for you from scratch? Order now!
Use Discount Code "Newclient" for a 15% Discount!

Do you need a similar assignment done for you from scratch? Order now!
Use Discount Code "Newclient" for a 15% Discount!

In this lab, students need to conduct attacks on the TCP/IP protocols. They can use the Netwox tools and/or other tools in the attacks. All the attacks are performed on Linux operating systems. However, instructors can require students to also conduct the same attacks on other operating systems and compare the observations. To simplify the “guess” of TCP sequence numbers and source port numbers, we assume that attackers are on the same physical network as the victims. Therefore, you can use sniffer tools to get that information. The following is the list of attacks that need to be implemented. 3.1 Task 1 : SYN Flooding Attack ` ` User Server SYN SYN+ACK ACK Active TCP Connection ` ` Attacker Server SYN Spoofed Addresses SYN+ACK ` Legitimate User SYN No Reply Normal TCP 3-way handshake between user and server SYN Flood: attacker sends many SYN to server without ACK. The server is not able to process request from legitimate user 1 2 3 4 1 2 3 Figure 2: SYN Flooding Attack SEED Labs – TCP/IP Attack Lab 4 SYN flood is a form of DoS attack in which attackers send many SYN requests to a victim’s TCP port, but the attackers have no intention to finish the 3-way handshake procedure. Attackers either use spoofed IP address or do not continue the procedure. Through this attack, attackers can flood the victim’s queue that is used for half-opened connections, i.e. the connections that has finished SYN, SYN-ACK, but has not yet gotten a final ACK back. When this queue is full, the victim cannot take any more connection. Figure 2 illustrates the attack. The size of the queue has a system-wide setting. In Linux, we can check the setting using the following command: # sysctl -q net.ipv4.tcp_max_syn_backlog We can use command “netstat -na” to check the usage of the queue, i.e., the number of halfopened connection associated with a listening port. The state for such connections is SYN-RECV. If the 3-way handshake is finished, the state of the connections will be ESTABLISHED. In this task, you need to demonstrate the SYN flooding attack. You can use the Netwox tool to conduct the attack, and then use a sniffer tool to capture the attacking packets. While the attack is going on, run the “netstat -na” command on the victim machine, and compare the result with that before the attack. Please also describe how you know whether the attack is successful or not. The corresponding Netwox tool for this task is numbered 76. Here is a simple help screen for this tool. You can also type “netwox 76 –help” to get the help information. Listing 1: The usage of the Netwox Tool 76 Title: Synflood Usage: netwox 76 -i ip -p port [-s spoofip] Parameters: -i|–dst-ip ip destination IP address -p|–dst-port port destination port number -s|–spoofip spoofip IP spoof initialzation type SYN Cookie Countermeasure: If your attack seems unsuccessful, one thing that you can investigate is whether the SYN cookie mechanism is turned on. SYN cookie is a defense mechanism to counter the SYN flooding attack. The mechanism will kick in if the machine detects that it is under the SYN flooding attack. You can use the sysctl command to turn on/off the SYN cookie mechanism: # sysctl -a | grep cookie (Display the SYN cookie flag) # sysctl -w net.ipv4.tcp_syncookies=0 (turn off SYN cookie) # sysctl -w net.ipv4.tcp_syncookies=1 (turn on SYN cookie) Please run your attacks with the SYN cookie mechanism on and off, and compare the results. In your report, please describe why the SYN cookie can effectively protect the machine against the SYN flooding attack. If your instructor does not cover the mechanism in the lecture, you can find out how the SYN cookie mechanism works from the Internet. 3.2 Task 2 : TCP RST Attacks on telnet and ssh Connections The TCP RST Attack can terminate an established TCP connection between two victims. For example, if there is an established telnet connection (TCP) between two users A and B, attackers can spoof a RST packet from A to B, breaking this existing connection. To succeed in this attack, attackers need to correctly construct the TCP RST packet. SEED Labs – TCP/IP Attack Lab 5 In this task, you need to launch an TCP RST attack to break an existing telnet connection between A and B. After that, try the same attack on an ssh connection. Please describe your observations. To simplify the lab, we assume that the attacker and the victim are on the same LAN, i.e., the attacker can observe the TCP traffic between A and B. The corresponding Netwox tool for this task is numbered 78. Here is a simple help screen for this tool. You can also type “netwox 78 –help” to get the help information. Listing 2: The usage of the Netwox Tool 78 Title: Reset every TCP packet Usage: netwox 78 [-d device] [-f filter] [-s spoofip] Parameters: -d|–device device device name {Eth0} -f|–filter filter pcap filter -s|–spoofip spoofip IP spoof initialization type {linkbraw} 3.3 Task 3 : TCP RST Attacks on Video Streaming Applications Let us make the TCP RST attack more interesting by experimenting it on the applications that are widely used in nowadays. We choose the video streaming application in this task. For this task, you can choose a video streaming web site that you are familiar with (we will not name any specific web site here). Most of video sharing websites establish a TCP connection with the client for streaming the video content. The attacker’s goal is to disrupt the TCP session established between the victim and video streaming machine. To simplify the lab, we assume that the attacker and the victim are on the same LAN. In the following, we describe the common interaction between a user (the victim) and some video-streaming web site: • The victim browses for a video content in the video-streaming web site, and selects one of the videos for streaming. • Normally video contents are hosted by a different machine, where all the video contents are located. After the victim selects a video, a TCP session will be established between the victim machine and the content server for the video streaming. The victim can then view the video he/she has selected. Your task is to disrupt the video streaming by breaking the TCP connection between the victim and the content server. You can let the victim user browse the video-streaming site from another (virtual) machine or from the same (virtual) machine as the attacker. Please be noted that, to avoid liability issues, any attacking packets should be targeted at the victim machine (which is the machine run by yourself), not at the content server machine (which does not belong to you). 3.4 Task 4 : TCP Session Hijacking The objective of the TCP Session Hijacking attack is to hijack an existing TCP connection (session) between two victims by injecting malicious contents into this session. If this connection is a telnet session, attackers can inject malicious commands (e.g. deleting an important file) into this session, causing the victims to execute the malicious commands. Figure 3 depicts how the attack works. In this task, you need to demonstrate how you can hijack a telnet session between two computers. Your goal is to get the the telnet server to run a malicious command from you. For the simplicity of the task, we assume that the attacker and the victim are on the same LAN. SEED Labs – TCP/IP Attack Lab 6 Note: If you use Wireshark to observe the network traffic, you should be aware that when Wireshark displays the TCP sequence number, by default, it displays the relative sequence number, which equals to the actual sequence number minus the initial sequence number. If you want to see the actual sequence number in a packet, you need to right click the TCP section of the Wireshark output, and select “Protocol Preference”. In the popup window, uncheck the “Relative Sequence Number and Window Scaling” option. The corresponding Netwox tool for this task is numbered 40. Here is part of the help screen for this tool. You can also type “netwox 40 –help” to get the full help information. You may also need to use Wireshark to find out the correct parameters for building the spoofed TCP packet. Listing 3: Part usage of netwox tool 40 Title: Spoof Ip4Tcp packet Usage: netwox 40 [-l ip] [-m ip] [-o port] [-p port] [-q uint32] [-B] Parameters: -l|–ip4-src ip IP4 src {10.0.2.6} -m|–ip4-dst ip IP4 dst {5.6.7.8} -o|–tcp-src port TCP src {1234} -p|–tcp-dst port TCP dst {80} -q|–tcp-seqnum uint32 TCP seqnum (rand if unset) {0} -H|–tcp-data mixed_data mixed data ` ` User Server ` Attacker Attacker hijacks the TCP session and sends “Z” to server on behalf of client Data: “A” Data: “Z” Seq No.: ? ACK 3-way Handshake Data: “B” ACK Sniffing Figure 3: TCP Session Hijacking Attack SEED Labs – TCP/IP Attack Lab 7 3.5 Task 5 : Creating Reverse Shell using TCP Session Hijacking When attackers are able to inject a command to the victim’s machine using TCP session hijacking, they are not interested in running one simple command on the victim machine; they are interested in running many commands. Obviously, running these commands all through TCP session hijacking is inconvenient. What attackers want to achieve is to use the attack to set up a back door, so they can use this back door to conveniently conduct further damages. A typical way to set up back doors is to run a reverse shell from the victim machine to give the attack the shell access to the victim machine. Reverse shell is a shell process running on a remote machine, connecting back to the attacker’s machine. This gives an attacker a convenient way to access a remote machine once it has been compromised. In the following, we will show how we can set up a reverse shell if we can directly run a command on the victim machine (i.e. the server machine). In the TCP session hijacking attack, attackers cannot directly run a command on the victim machine, so their jobs is to run a reverse-shell command through the session hijacking attack. In this task, students need to demonstrate that they can achieve this goal.

Do you need a similar assignment done for you from scratch? Order now!
Use Discount Code "Newclient" for a 15% Discount!