CSIT302-Cybersecurity

1.Duqu malware, which we lightly covered during the lecture is a malware (or malware family) that is believed to be used for “Stuxnet”. Assume that as a member of the security management team in a large company, you want to prevent Duqu from affecting the employees in the company. Your task is to write a report about Duqu, which should include the following contents:

-Summary

-Overview

oRationale

oHow it works (Mechanism)

-Impacts

-Mitigation plans

oRecommendations for company

oRecommendations for employee

oRecommendations for IT administrator

-Reference

The length of your report should be 1500 – 2000 words excluding reference. Your report will be marked based on presentation, clarity, structure and succinctness of your report contents.

2.Assume that UOW wants to deploy Windows Server 2016. Before the deployment, the server is required to be configured in compliance with the UOW IT Sever Security Policy

Your task is to select suitable items from the STIGs (Security Technical Implementation Guides) of Windows Server 2016

for the requirements from the IT Server Security Policies given above. Then, write the security guidelines for the policy