Attack Tree: Networking
EdithCowan College Australia
Information:
This assignment will assess your understanding of attack
tree methodology, your skills in the analysis of a concept
and your research ability into identifying methods by
which to compromise a specific entity.
A manager at an accounting firm has recently discovered
that a number of employees use various online social
networking services. In the interest of the employees you
have been hired by this firm to educate the employees on
ways in which their Facebook or Twitter account could be
compromised. The employees have basic to intermediate
computer skills. In addition, they are quite naive
regarding the security risks of using the Internet. A small
internal survey discovered that the majority of employees
do not use a personal firewall or anti-virus software on
their Windows 10 operating system. In addition, they all
use a Gmail email accounts to access Facebook or
Twitter. Thus you can assume that overall ideal cyber
security practices are not followed.
Task:
Using the background information draw a set of attack
trees that reflect your analysis of how you could
successfully compromise a Facebook or Twitter account.
In the context of this assignment, ‘compromise’ refers to
process of obtaining the user’s authentication credentials,
obtaining the data within these online services, possessing
the ability to misuse these online services for your own
personal gain, or simply spying on the private content
within these accounts. The manager is interested in all
ways in which the account could be compromised.
The submission must be a Microsoft Word document. The
diagrams may be produced using any software product
but must be converted and inserted into the Microsoft
Word document. All diagrams and text must be
incorporated into one document. Assignments that are not
in the specified format will not be marked. To
demonstrate your research ability you must adequately
reference each of the attack methods you have identified.
It is recommended that you place the ‘in-text’ reference
within each node of the attack tree.