Distance Education Team 2

1
Distance EducationTeam 2

• Security Architectures and Analysis

2
Distance Education

• Team Members
• Chris Rush Team Leader, Step 1
• Mike Gazdus A/V Expert, Step 1
• Ron Banerjee Tech Analyst, Step 2
• Russ Griffith Tech Analyst, Step 2
• Scott Currie Scribe, Step 3
• Chris Ameter Tech Analyst, Step 3
• Jack Pickett Tech Analyst, Step 3
• Raman Rangswamy Tech Analyst, Step 4
• Ayman Lugman Tech Analyst, Step 4

3
Topics for Discussion

• Step 1 Recap
• DE User Categories
• DE Architecture
• Step 2 Goals
• Essential Services and Assets
• Essential Usage Scenarios
• Essential Scenarios Trace
• Essential Components
• Whats Next

4
Step 1 Recap

• Status of admin server
• DE Organization Mission
• To offer the same high quality MSE courses
  currently available to resident students,
  through the use of on-line, Computer Based
  Training (CBT), and two-way audio
• two-way video through Distance Education.
• Mel Rosso-Llopart
• Director, Distance Education

5
DE User Categories

• Student
• Admin Staff
• Technical Support Staff
• Web Support Staff
• Director Associate Director

6
DE Architecture
Director AssocDirector
Student
DE Student Client (browser)
DE Admin Client (Win32)
Admin Staff
Web App (Perl Scripts)
Admin App (VB)
E-mail
Apache Server
Web Support
Admin DB (Oracle)
Product DB (MySQL)
Admin Server (Win NT)
Product Server (Linux)
Tech Support
7
Step 2 Goals

• Define essential service and assets
• - system capabilities that support the business
  
• mission
• - must be available despite intrusions
• Describe scenarios related to essential
• services and assets
• - steps in essential service/asset usage
• Identify essential components
• - parts of architecture required by essential
  service
• and asset scenarios

8
Essential Services Assets
Essential Services

• Tech support updates My SQL database
• Student access to web application
• Web support(Courseware specialist) perform
  maintenance
• on web applications.

Essential Assets

• Student data
• Web contents
• Calendars
• Class assignments
• Files
• Assigned readings

9
Essential Services/Asset Usage Scenarios
Students
Web Support

• EUS1 Access web application
• Logs on
• Access web content like a class
• assignment page
• Scroll to relevant area
• Select and read information
• Logs off

• EUS3 Perform web application maintenance
• Logs on
• Make changes to web contents
• Save changes
• Logs off

Tech Support

• EUS2 Update My SQL database
• Logs on
• Updates the database
• Commits changes
• Logs off

10
Essential Scenarios Trace
Student
My SQL
Product Server
Apache Server
Web App (Perl Scripts)
Client Browser
Client Browser
Product Server
Apache Server
Web App (Perl Scripts)
Tech Support
My SQL
Web App (Perl Scripts)
Product Server
Apache Server
Web Support
Web Application
Product Server
11
Essential Scenarios Trace
Director AssocDirector
Student
DE Student Client (browser)
DE Admin Client (Win32)
Admin Staff
Web App (Perl Scripts)
Admin App (VB)
E-mail
Apache Server
Web Support
Admin DB (Oracle)
Product DB (MySQL)
Admin Server (Win NT)
Product Server (Linux)
Tech Support
12
Essential Components

• My SQL database
• Web Application
• Product Server
• Apache Server

13
Whats Next

• Discuss attacker profiles
• Discuss likely levels of attack
• Discuss attack scenarios
• Identify softspots

14
Conclusion

• Discussed the DE Architecture
• Defined the user category
• Displayed the different architecture hardware
• and software components
• Discussed essential services and assets
• Defined essential services/assets usage
  scenarios
• Mentioned the essential components
• Briefly showed where we are going next.

15
Questions?