Project #2: Security Strategy Implementation Recommendations for Sifers-Grayson Overview: Now that the After Action Reports have been analyzed, the consultants must develop a plan for improving the security posture at Sifers-Grayson. This will be documented in a Security Strategy Recommendations document. The security strategy will be based upon multiple layers of policies, processes, and technologies that, when implemented, will be used to defend the Information Technology enterprise from both internal and external threats and attacks. Two defensive security strategies have been chosen by the senior members of the team. 1. Defense Strategy #1: Build a DMZ for the R&D Center. The DMZ will host servers accessed by the engineers while teleworking and while reaching back to the R&D center from the test range. The DMZ will require the following: (a) business class routers, (b) business class firewalls, and (c) intrusion detection and prevention system. Demilitarized Zone (DMZ). For definitions and diagrams see https://www.us-cert.gov/ics/Control_System_Security_DMZ-Definition.html and https://fedvte.usalearning.gov/courses/Security+_v401/course/videos/pdf/Security+_v401_D02_S04_T04_STEP.pdf 2. Defense Strategy #2: Implement Enterprise-wide Protective and Detective Measures to defend against both internal and external attackers. These measures will include (a) controlling access to software documentation and source code, (b) implementing enterprise-wide identity management, and (c) implementing either a Security Information and Event Management (SIEM) tool or a Unified Threat Management (UTM) tool. Your Task: You have been assigned to research products which will be used to implement the two Defense Strategies. You will need to research suitable products and then write a report recommending a set of products and services which can be used to implement the selected strategies. Your report will include summary information and explanations about defense in depth and the two selected strategies. Note: You may need to do additional reading and research to find the information required to support your explanations of defense in depth and the selected defense strategies. Make sure that you cite authoritative sources for this information. Product Research: 1. Products to Implement Defense Strategy #1 (Build a DMZ for the R&D Center). You must choose one product for each of the following categories (router, firewall, intrusion detection and prevention). Business Class Router with WAP and VPN capability (choose one of the following brands)LinksysCISCONetGearOther (must get instructor’s approval first)Business Class Firewall (Network Based) (choose one of the following brands)SonicWallFortinetWatchguardCISCOOther (must get instructor’s approval first)Intrusion Detection and Prevention System (network based – not cloud)McAfeeTrend MicroEntrustCiscoOther (must get instructor’s approval first) 2. Products to Implement Defense Strategy #2 (Implement enterprise-wide protection, detection, and prevention capabilities). These tools or applications will be installed or used on Sifers-Grayson servers (cloud hosting NOT allowed). Select one tool in each of the categories listed below. Your product recommendations must include all of the listed categories. Note: Make sure that you are using appropriate resources to find information to support your analysis and product recommendations. Vendor websites, industry or trade publication websites, and government websites are usually acceptable sources of information about the defensive strategies and products you will write about in this assignment. Write: An Introduction section which presents the security strategies being recommended in your report. You should explain what how these strategies will improve the overall security posture of Sifers-Grayson.A Security Strategies section in which you present an analysis of the defensive security strategies and then provide an explanation as to how each of the two selected defensive strategies will improve the security posture for Sifers-Grayson. Include a comparison of the two primary types of strategies – layered security and defense in depth. Then, explain how the selected security strategies use one or both of these approaches. Use information from Project #1 and the Red Team’s penetration tests to support your justification for implementing the selected security strategies. A Product Evaluations section in which you present and discuss the technologies and products which will be used to implement each strategy. You must have a separate sub-section for each defense in depth strategy. Under each sub-section, you will name and describe the individual products (i.e. describe firewalls and then describe your chosen firewall product). Your presentation of each product should be in the form of a recommendation to purchase / implement.A Summary Implementation Recommendations section in which you summarize your product recommendations for products and technologies to be used in implementation the two defensive security strategies. Be sure to explain the benefits of implementing the two strategies (e.g. protection, detection, prevention of incidents caused by attacks). Submitting Submit your paper in MS Word format (.docx or .doc file) using the Project #2 assignment in your assignment folder. (Attach the file.) Additional Information You will need between 5-8 pages to cover all of the required content. If your paper is shorter than 5 pages, you may not have sufficient content to meet the assignment requirements As you write your strategy paper, make sure that you address security issues using standard cybersecurity terminology (e.g. protection, detection, prevention, “governance,” confidentiality, integrity, availability, nonrepudiation, assurance, etc.).See the ISACA glossary https://www.isaca.org/pages/glossary.aspxif you need a refresher on acceptable terms and definitions. You must include a cover page with the assignment title, your name, and the due date. Your reference list must be on a separate page at the end of your file. You are expected to write grammatically correct.You are expected to credit your sources using in-text citations and reference list entries. Both your citations and your reference list entries must follow a consistent citation style (APA, MLA, etc.).

Assignment SteganographAssignment Steganography .pdfDirectionsPart 1 Using OpenPuff SteganographyNote: Here is a link to a great video on how to use OpenPuff which I think you will find it very helpful! https://www.youtube.com/watch?v=P1I8XXlNYoAUnlike cryptography that scrambles a message so that it cannot be viewed, steganography hides the existence of the data. In this project, you will use OpenPuff to create a hidden message.Use your web browser to go tohttps://embeddedsw.net/OpenPuff_Steganography_Home.htmlIt is not unusual for websites to change the location of where files are stored. If the URL above no longer functions, open a search engine and search for “OpenPuff.”Click Manual to open the OpenPuff manual. Save this file to your computer. Read through the manual to see the different features available.Click OpenPuff to download the program.Click Screenshot to view a screen capture of OpenPuff. Right-click on this image and save this image jpg to your computer. This will be the carrier file that will contain the secret message.For added security OpenPuff allows a message to be spread across several carrier files.Navigate to the location of the download and uncompress the Zip file on your computer.Now create the secret message to be hidden. Open Notepad and enter This is a secret message.Save this file as txt and close Notepad.Create a Zip file from the Message Navigate to the location of this file through Windows Explorer and click the right mouse button.Click Send to and select Compressed (zipped) folder to create the Zip file.Navigate to the OpenPuff directory and double-click exe.Click Hide.Under Bit selection options, note the wide variety of file types that can be used to hide a message.Under (1) create three unrelated passwords and enter them into Cryptography (A), (B), and (C). Be sure that the Scrambing (C) password is long enough to turn the Password check bar from red to green.Under (2) locate the message to be hidden. Click Browse and navigate to the file zip. Click Open.Under (3) select the carrier file. Click Add and navigate to jpg as shown in Figure 3-11.Click Hide Data!Navigate to a different location than that of the carrier files and click OK.After the processing has completed, navigate to the location of the carrier file that contains the message and open the file. Can you detect anything different with the file now that it contains the message?Now uncover the message. Close the OpenPuff Data Hiding screen to return to the main menu.Click Unhide.Enter the three passwords.Click Add Carriers and navigate to the location of Carrier1 that contains the hidden message.Click Unhide! and navigate to a location to deposit the hidden message. When it has finished processing click OK.Click Done after reading the report.Go to that location and you will see zip.Close OpenPuff and close all windows.Deliverable Submit a screenshot showing the images bytes without the hidden file and show the bytes of the file with the hidden file. You can use Windows Explore.Submit a screenshot showing successful hiding and unhiding the document.Part 2 Hiding an image in multiple images or video.Using what you have learned in part 1. Identify a word document file that is not more than 15Kb. Using sample images or videos as Carriers. Hide the Word document into a group of images or videos.Use only 1 password to secure the files and deactivate the other passwords.Submit a screenshot showing the images bytes without the hidden file and show the bytes of the file with the hidden file. You can use Windows Explore.Submit a screenshot showing successful hiding and unhiding the document.Part 3 Questions Which areas of a file cannot be used by steganography to hide data?What are the advantages and disadvantages of using steganography versus symmetric or asymmetric encryption?Which of the 5 security fundamentals principals for defense can be found using steganography,Explain how each principal is used from questions 3.GradingThis assignment is worth 100 points.Grading Rubric Correct submission of Part 1 30 pointsCorrect submission of Part 2 30 pointsCorrect submission of Part 3 40 pointsTotal 100 points