CMP73001 Cybersecurity Management Assignment 3

Task 2: Secure Systems / Networks / Applications

Individual: Explain two different types of VPN implementation? What is the difference between IPsec, SSL and SSH protocols? Which of the following remote access control protocols is more secure and why?

• Telnet
  
• SSH
  

Group: This group question should be answered in a group of two or three students. Each student is responsible to choose one role and answer its question.
Role1: Explain which security measures (including hardware and software) you intend to implement in MyHealth company to mitigate existing risks (a firewall and an IDS are examples of security measures). For this question, you should submit a logical topology of your proposed network design. The design should show how the security measures are connected to the company’s network.
In your network design, the servers should be publicly available to external users. Therefore, the servers’ zone should be separate from the internal network and computers.
Role 2: Do some research and write at least 250 words about the security of virtualization and cloud services and common threats in cloud environment. How can cloud computing mitigate the impact of security incidents on MyHealth company?
Role 3: The company has a low level of wireless security. Write about 250 words about wireless vulnerabilities in the company network, and propose the methods which can address these vulnerabilities in MyHealth Company.

How can a proxy firewall help to improve the application layer security in MyHealth Company? Explain your answer.