FNU's Technology Implementation of Security Controls Project Report

This project focuses on the technology implementation of security controls for FNU, a higher education organization providing online courses. The project addresses network requirements, including improvements for online assignment submissions, the implementation of BYOD and WAT policies, and the need for robust security measures to protect data and ensure quality of service. The project details the implementation of centralized authentication using LDAP, including hardware and software requirements, a block diagram, and a configuration guide for setting up LDAP over SSL. The project also outlines security controls for wireless networks and BYOD, and includes a test plan design with implementation steps and expected results. The goal is to provide a secure and accessible network environment for both on-campus and off-campus users, safeguarding student data and facilitating a seamless learning experience.

Technology Implementation of Security Controls
Overview
FNU is a higher educational organization for long distance learning. This is the first educational
organization providing online courses in the country. The university runs online training and courses; it
requires a network infrastructure of very high performance to provide Quality of Services to the end
users.
Network Requirements:
1. Improvements with issues in online assignment submissions.
2. Implementation of bring your own device policy by adhering wireless network in the campus.
This enables the students to work on their own laptops, tablets, notebooks and smartphones.
3. With WAT it will allow users (students and staff members) to access network facilities from
their homes.
4. Security measures must be taken to safeguard data from the hackers.
5. Providing Quality of Services to the network users both at on-campus and off-campus.
The university provides off-campus distance learning and hence must be available at any time for its
distance learners. Moreover, it requires the student’s on-campus to submit their assignments online;
hence availability of network is very important at that part as well.
FNU must also provide Bring Your Own Device and Work AT Home policies in the network for more
usability in the network. These policies are highly needed at the university since it is affecting the
usability of the network. Once more and more personal devices can be connected to the network, it will
affect in overall students learning process.
FNU needs to implement a secure wireless network which safeguards student’s login credentials, files,
and other important assets. Moreover, it may restrict the intruder getting into the network by
facilitating strict security measures. Authentication will also need once BYOD and WAT policies discussed
above are implemented in the network to filter illegal activities. The other security measures should also
be taken to protect important files in the server.
Security Controls for Wireless Network:

1. Centralized Authentication
2. Authorization
3. Cryptography
Security Controls for BYOD:
1. Device Fingerprinting
2. Desktop / Application Virtualization
Centralized Authentication
Objective
Being a large network, FNU needs to employ authentication schemes to make the network secure and
protect it from outside users. The centralized authentication is required since students and staff may log
in from their devices also and in that case, logging in every time for different devices will create an extra
overhead. Hence, centralized authentication should be employed in the system. There are different
protocols for authentication; the one that will be used for FNU’s network is a LDAP Protocol. Lightweight
Directory Access Protocol (LDAP) is a directory server that allows grouping of users in the network and
assigns different authorities to them. The directory server, LDAP stores username, full names, telephone
numbers and email addresses of the users.
Resources Used
Minimum hardware requirements:
 Processor: Quad core 2GHz.
 10GB Space for database
 6GB RAM
Minimum Software Requirements:
 Windows OS 7 or above
 Windows Server 2012 R2
 SSL/TLS libraries
Developing the control

Description of the System
Software :
 Language: Java 7
 Platform: NetBeans 7.4
Hardware:
 OS: Windows 8
 RAM: 4GB
 HDD: 500GB
 Processor: Intel i5

Block Diagram
Figure 1 Block Diagram of Network for LDAP
Configuration of the system
Configuration guide for setting up LDAP on SSL
The complete steps are divided into 2 major sections:
1. Make a Virtual Windows Server in Azure
2. Setup LDAP on SSL
1. Make a Virtual Windows Server in Azure
Add AD LDS in Virtual Machine ldapstest
Click on Start --> Server Manager --> Add Roles and Features. Click Next.

Click Next.
2. Setup LDAPS (LDAP over SSL)
Click on Start --> Server Manager --> Add Roles and Features. Click Next.