Technology Implementation of Security Controls

The assignment requires implementing security controls for FNU's network infrastructure to provide quality services to students and staff members. The implementation involves bringing your own device (BYOD) and work at home (WAT) policies, centralized authentication using Lightweight Directory Access Protocol (LDAP), authorization, cryptography, device fingerprinting, desktop/application virtualization, and other security measures to protect important files in the server.

Technology Implementation of Security Controls
Overview
FNU is a higher educational organization for long distance learning. This is the first educational
organization providing online courses in the country. The university runs online training and courses; it
requires a network infrastructure of very high performance to provide Quality of Services to the end
users.
Network Requirements:
1. Improvements with issues in online assignment submissions.
2. Implementation of bring your own device policy by adhering wireless network in the campus.
This enables the students to work on their own laptops, tablets, notebooks and smartphones.
3. With WAT it will allow users (students and staff members) to access network facilities from
their homes.
4. Security measures must be taken to safeguard data from the hackers.
5. Providing Quality of Services to the network users both at on-campus and off-campus.
The university provides off-campus distance learning and hence must be available at any time for its
distance learners. Moreover, it requires the student’s on-campus to submit their assignments online;
hence availability of network is very important at that part as well.
FNU must also provide Bring Your Own Device and Work AT Home policies in the network for more
usability in the network. These policies are highly needed at the university since it is affecting the
usability of the network. Once more and more personal devices can be connected to the network, it will
affect in overall students learning process.
FNU needs to implement a secure wireless network which safeguards student’s login credentials, files,
and other important assets. Moreover, it may restrict the intruder getting into the network by
facilitating strict security measures. Authentication will also need once BYOD and WAT policies discussed
above are implemented in the network to filter illegal activities. The other security measures should also
be taken to protect important files in the server.
Security Controls for Wireless Network:

1. Centralized Authentication
2. Authorization
3. Cryptography
Security Controls for BYOD:
1. Device Fingerprinting
2. Desktop / Application Virtualization
Centralized Authentication
Objective
Being a large network, FNU needs to employ authentication schemes to make the network secure and
protect it from outside users. The centralized authentication is required since students and staff may log
in from their devices also and in that case, logging in every time for different devices will create an extra
overhead. Hence, centralized authentication should be employed in the system. There are different
protocols for authentication; the one that will be used for FNU’s network is a LDAP Protocol. Lightweight
Directory Access Protocol (LDAP) is a directory server that allows grouping of users in the network and
assigns different authorities to them. The directory server, LDAP stores username, full names, telephone
numbers and email addresses of the users.
Resources Used
Minimum hardware requirements:
 Processor: Quad core 2GHz.
 10GB Space for database
 6GB RAM
Minimum Software Requirements:
 Windows OS 7 or above
 Windows Server 2012 R2
 SSL/TLS libraries
Developing the control

Description of the System
Software :
 Language: Java 7
 Platform: NetBeans 7.4
Hardware:
 OS: Windows 8
 RAM: 4GB
 HDD: 500GB
 Processor: Intel i5

Block Diagram
Figure 1 Block Diagram of Network for LDAP
Configuration of the system
Configuration guide for setting up LDAP on SSL
The complete steps are divided into 2 major sections:
1. Make a Virtual Windows Server in Azure
2. Setup LDAP on SSL
1. Make a Virtual Windows Server in Azure
Add AD LDS in Virtual Machine ldapstest
Click on Start --> Server Manager --> Add Roles and Features. Click Next.

Click Next.
2. Setup LDAPS (LDAP over SSL)
Click on Start --> Server Manager --> Add Roles and Features. Click Next.

Next, click on Start à Search “Manage Computer Certificates” and open it.

Test Plan Design
Test Plan is as enlisted below:
1. Add new users to the LDAP server
2. Adding a Listener to View/Store the Test Results
3. Delete a test from LDAP Server Database
4. Modify test in LDAP Server Database
Test Plan Implementation
1. Add user

2. Adding a Listener to View/Store the Test Results
3. Delete Test
4. Modify Test

Test Results and Analysis
To view all the results in Apache JMeter for all the test created and tested, Click Add->Listener->View
Results in Table.