SBM4304 Applied Project: Mobile Device Security and Linux Server

This applied project investigates information security within the context of the MBC TV broadcasting organization, which allows employees to use their own devices. The project explores mobile device vulnerabilities, including application-based and web-based threats, and proposes security protection techniques such as antivirus installation and device encryption. It examines how to ensure web service availability using a Linux web server, including Apache configuration and troubleshooting. The project also analyzes the impact of employees on information security, offering risk management recommendations to mitigate threats. Furthermore, it discusses Linux server auditing tools like NIX-AUDITOR, LYNIS, Tripwire, and Apachetop, and how they can be used to monitor and analyze web and email server problems. Finally, the project demonstrates creating directories and users on a Linux system, illustrating commands for setting permissions and enhancing system security.

APPLIED PROJECT

Table of Contents
INTRODUCTION...........................................................................................................................1
TASK 1............................................................................................................................................1
1. Ways in which mobile devices are vulnerable to destruction and abuse.................................1
2. Two types of security protection techniques for mobile devices and ways in which they can
be used to mitigate threats...........................................................................................................2
3. Organization can ensure the availability of the web service using Linux web server.............2
4. Impact of employee on information security of the MBC organization. Risk management
recommendation to reduce the risk of employee when they use mobile devices for work.........3
5. Linux server auditing tools and discuss how they can be used by the selected organization to
monitor and analysing the web server and email server problems..............................................4
TASK 2............................................................................................................................................4
1. Demonstrate the way of creating two directories under main directory. Where, both the
directories are the student ID of two students. Illustrate the command/s can be used to set full
access to main directory...............................................................................................................4
2. Demonstrate the way of creating three users, where all the three users are the first name of
three students...............................................................................................................................5
CONCLUSION................................................................................................................................6
REREFENCES................................................................................................................................7

INTRODUCTION
IS securities can be defined as a set of cybersecurity’s strategies that helps the
organizations to prevent company from unauthorised access to their assists such as computer
systems, data, information and network. It helps in maintaining security of their systems in a
much better manner (Arp and et. al., 2017). Linux web servers are one of the most effective and
efficient way through which data from hackers can be protected. There are various kinds of
methods through which server can be secured from frequent attacks of hackers. It can also help
in restricting permission for all the employees for directories. This assignment will focus on
MBC TV broadcasting organisation that allows their employees to use their own computing
devices and also provides information systems services to the staff and customers. This
assignment will lay emphasis on types of threats against mobile devices, two types of security
protection techniques for mobile devices, ways in which organization can ensure the availability
of the web service using Linux web server, impact of employee on information security of the
MBC organization, Linux server auditing tools for monitoring and analysing the web server and
email server problems.
TASK 1
1. Ways in which mobile devices are vulnerable to destruction and abuse
There are various kinds of mobile threats like viruses, spyware that can inflect other
devices connected to it, applications within the mobile and many more (Kearns, 2016). To main
types of threats against mobile devices that are highly dangerous and can make mobile devices
destructive and abusive. These threats can make mobile devices vulnerable to destruction and
abuse. Some of the most common threats to mobile devices are:
 Application based threats (malicious Applications): there are various kinds of applications
that look legit to people but they are actually spyware and malware that can either steal
business or personal information of owner of the mobile phone without their realization of
what’s going on. These applications can make mobile devices and other application within
the devices vulnerable to abuse because of the malware (Wang, Hahn and Sutrave, 2016). If
these kinds of applications are installed without any information of users then it can become
one of the main reasons because of which information of the mobile user can be stolen.
 Web based threats: These are subtle threats and tend to go unnoticed. This threat mainly
occurs when people visit affected websites that looks completely fine in the front end but are
1

actually malicious and can download such malicious content within the mobile devices.
Some of these websites are intended for destruction. Some of the websites are designed in
such a manner that it can redirect the user to other web page with the intention of destruction
of information within the device i.e. such threats can destroy all kinds of information within
the mobile device.
2. Two types of security protection techniques for mobile devices and ways in which they can be
used to mitigate threats
There are various kinds of security protection techniques that can be used for mobile
devices in order to reduce or mitigate threats, protect mobile devices and increase protection of
information stored within the devices. Two most commonly used security protection techniques
that can be used for mobile devices are:
 Installing an antivirus application: There are many applications consist of malicious codes,
that once installed it can send users data to the hacker and can increase threat to privacy for
the users. Installation of antivirus applications within the mobile device can help in
increasing security of the devices (Hewitt, Dolezel and McLeod Jr, 2017). Some of the
antivirus application provides various other kinds of functionalities such as: providing
information of what kind of applications are threats, erasing data if mobile phone is lost,
tracking or blocking unknown callers and many more. This application can be used for
application based or malicious application threats. It will also help the user in knowing what
kind of websites are not safe and what kind of content is being downloaded by the which is
not safe for the mobile devices and can make them vulnerable to abuse and destruction.
 Encrypt device: most of the mobile devices are a bundle of built- in encryption features.
Encryption helps in making mobile data unreadable. if in case mobile device is hacked or
stolen all the data within the mobile can be encrypted for the unauthorised users. Users
simply need to locate this feature within their devices and enter a password to encrypt their
device. It is a secure way because if wrong password is entered wrong multiple times then it
will erase all the data present within the mobile device.
3. Organization can ensure the availability of the web service using Linux web server
Apache is one of the most commonly used web servers on Linux system. These web
servers are used to serve web pages required by the computers present within an organization or
by client’s computer (Welch, Pressey and Reside, 2018). Organization need to configure Linux
2

Apache web server as a root, other than this they also need to configure firewall to be performed
as a root. After this company should check the web browser to check the work as non-root user.
If an organization need to check availability of the web server, they need to visit their website
hosted by Apache web server and check whether it is available on local machine or not by using
the localhost address. Apache listens to connections from local host only and if an organization
wants to listen to connections or check its availability of website on Linux web server (Apache)
they need to enter address of HTML website. Other than this if the organization wants to check
availability of web services on the Apache web server then following steps can be taken: first of
all, check service status (Kuo and et. al., 2018). If the service has stopped then restart the service.
If any kind of issue is present then understand the issue. Most common issue faced is port
conflict. If the ports are conflicting then find the conflicting port and stop the program running
on port 80 as this port is used by Apache. Then again restart the server and enter local host
address to check whether Apache is running smoothly or not.
4. Impact of employee on information security of the MBC organization. Risk management
recommendation to reduce the risk of employee when they use mobile devices for work.
Employees impacts information security of the organization in many ways. Today usage
social media platforms are increasing among people. Many organizations have allowed usage of
such platforms used by employees within the workplace. Slowly organizations have started to
realize that social media is impacting organization more and can be used for more than one
purpose of interacting with the employees. Social media is influencing attitude of employees
because of which information security of the organizations is getting impacted a low. MBC is a
TV broadcasting organization and excessive usage of social media by the employees is
increasing vulnerabilities to information security of the organizations as any information
important to be broadcasted can be leaked on social media platforms way before it is
broadcasted. It can increase risk of leakage in information security of the organization. Here, are
few recommendations that can help the organization to reduce risk of employees when they use
mobile devices for work (Gantala and et. al., 2017) . Some of the recommendations are: One of
the ways is to restrict physical access. Usage of laptops or video mobile phones within the
premises of the organization should be restricted. Employees should nor be allowed to record or
save any kind of organizational information within their mobile phones. All the devices
3

connected to the organizational system should be continuously monitored so that what kind of
information is being transferred can be checked by the organization.
5. Linux server auditing tools and discuss how they can be used by the selected organization to
monitor and analysing the web server and email server problems
There are various kinds of lix server auditing tools that can be used by organizations. First
is NIX-AUDITOR which focuses on checking password aging, accounts and file systems as
well. Another auditing tool is LYNIS, it is a common kind of auditing tool which is being
supported by all versions of Linux. It is a social tool which includes an online dashboard. It also
helps an organization to check their server against other policies such as HIPPA. Tripwire is
another kind of auditing tool that can be used by organizations for monitoring usage of
unauthorized files(Cameron, 2016). Many Linus auditing tools can be used for monitoring and
analysing any kind of problems faced by organizations in terms of web server and email server
problem. These tools can be used for debugging Linux system performance problems frequently.
These tools continuously monitor performance of Apache web server. One of the auditing tools
that can be used for analysing web sever and email server problem is Apachetop. It is based upon
a mytop tool which is a MySQL thread and performance monitoring tool.
TASK 2
1. Demonstrate the way of creating two directories under main directory. Where, both the
directories are the student ID of two students. Illustrate the command/s can be used to set
full access to main directory
 mkdir is a command in Linux that allows users to create or make their own directories. mkdir
stands for “make directory” (Blake, 2017). Users should keep in mind that Linus is case
sensitive so they should keep in mind about small or capital letters.
 ls command in Linux is used to list all the directories in the current location.
 cd is used for navigating from main directory to sub- directory.
Command to make main directory and sub directories of it are:
 $ cd Documents/
 $ mkdir SBM4304
 $ cd SBM4304
 $ mkdir StudentID1
 $ mkdir StudentID2
4

 $ ls -R (show recursive directory tree)
Command to set permission to the main directory: There are two ways of doing this: first is to
grant permission while creating directory and second is to grand full access after creating the
directory. Sudo command in Linux is used to gain admin rights or persmission on any
directory or on a system (Shinde and et. al., 2017). 777 is used to provide read, right and
execute permission for everyone.
1.
 $ mkdir -m777 SBM4304
 $ ls -l
2.
 $ sudo chmod -R 777 /var/SBM4304
2. Demonstrate the way of creating three users, where all the three users are the first name of
three students
It is extremely important create different user groups so that privacy and security of the
system can be enhanced. Creation of different users will help in reducing access to files, folders
or directories and segregate files and folders of all the users in a different way. Most commonly
used commands to create username with different passwers are: useradd and adduser. useradd or
adduser are one of the most common command used in Linux for creating users with some
specific properties and limitations. Passwd is a command to set password for the created users.
 $ useradd u1
 $ passwd u1
After this change password for users u1 with be shown. Enter the new password and
retype the password for u1 which is longer than 8 characters.
 $ useradd u2
 $ passwd u2
After this again change password for users u2 with be shown. Enter the new password
and retype the password for u2 which is longer than 8 characters.
 $ useradd u3
 $ passwd u3
After this change password for users u3 with be shown. Enter the new password and
retype the password for u3 which is longer than 8 characters.
5

CONCLUSION
From the above assignment it has been summarized that there are various kinds of threats
that can make mobile devices vulnerable to abuse and destruction. It can affect security of
information stored within the mobile devices. In order to reduce these threats, there are various
kinds of f security protection techniques for mobile devices so that such kinds of threats can be
mitigated. In order to enhance security of their websites, information system so that continuous
monitoring of web server can be done Linus web server (Apache) can be used. There are various
kinds of Linux server auditing tools that can be used for monitoring and analysing the web server
and email server problems. It has also been analysed that there are various kinds of commands in
Linux to create directories and sub directories or create uses.
6

REREFENCES
Books and journals
Arp, D., and et. al., 2017, April. Privacy threats through ultrasonic side channels on mobile
devices. In 2017 IEEE European Symposium on Security and Privacy (EuroS&P) (pp.
35-47). IEEE.
Blake, G., 2017. CentOS 7.3 Linux Server Guide. CreateSpace Independent Publishing Platform.
Cameron, D., 2016. Modern Web Server Administration using Linux and Wordpress.
Gantala, A., and et. al., 2017. Design of Smart Sensor Using Linux-2.6. 29 Kernel. Interna-tional
Journal of Applied Engineering Research. 12. pp.7891-7896.
Hewitt, B., Dolezel, D. and McLeod Jr, A., 2017. Mobile device security: Perspectives of future
healthcare workers. Perspectives in health information management, 14(Winter).
Kearns, G.S., 2016. Countering mobile device threats: A mobile device security model. Journal
of Forensic & Investigative Accounting. 8(1). pp.36-48.
Kuo, C.C., and et. al., 2018, November. Design and Implementation of a Host-Based Intrusion
Detection System for Linux-Based Web Server. In International Conference on
Intelligent Information Hiding and Multimedia Signal Processing (pp. 354-361).
Springer, Cham.
Shinde, S., and et. al., 2017, February. Panoply: Low-TCB Linux Applications With SGX
Enclaves. In NDSS.
Wang, Y., Hahn, C. and Sutrave, K., 2016, February. Mobile payment security, threats, and
challenges. In 2016 second international conference on mobile and secure services
(MobiSecServ) (pp. 1-5). IEEE.
Welch, H., Pressey, R.L. and Reside, A.E., 2018. Using temporally explicit habitat suitability
models to assess threats to mobile species and evaluate the effectiveness of marine
protected areas. Journal for nature conservation. 41. pp.106-115.
7