Wireless Security Assignment -

Scenario -

Rare Vintage Auto Parts Ltd supplies automotive parts to car mechanics, car dealerships, and the mining industry and lately to the enthusiastic motorists. There are 4 offices and 1 warehouse from where all stock is sourced. Currently the inventory system is located at the warehouse and is accessed on and expensive fixed 512Kbit lines.

The shops are geographically spread out as per the map below which is not to scale. The shops are located in Cockburn Central next to the Jandakot airport due to easy access for shipping parts over to customers, Kalamunda, Cottesloe, Bayswater (being the main Head Office) and Joondalup. Rare Vintage Auto Parts Ltd has recently had some issues in regards to the smooth running of their business. You have been assigned by your boss to assess and report on resolution strategies for the customer - i.e. Rare Vintage Auto Parts Ltd.

The Rare Vintage Auto Parts Ltd business generate a base turnover of $50 million per year with 150 employees. Over 50% of business revenue is from credit card transactions. The tills in the Bayswater (main head office and store) use wireless connections to communicate to the organisation network.

The company's main head office and store computer network is entirely wireless based as the business is located in a heritage listed building. The Cockburn Central store has a wired computer network but has wireless connectivity for the tills which seems to experience intermittent dropouts.

Both stores network via wireless link to the Bayswater Head office and shop for inventory. In addition, each store seem to have an access point so that the staff at each store can use handheld devices (such as PDAs, Smart devices, etc..) to take inventory, and another Access Point (AP) so that managers can use laptops in their office.

The incident -

Last month, the company had to sack its IT Administrator for accessing illicit material after his 3rd warning. The IT administrator became hostile and had to be ejected from the premises by the police. In the meantime, one of the senior managers with very poor IT understanding has been tasked to managed the company computer network whilst you investigate and Later that afternoon the network for the Cottesloe shop became unserviceable.

Another concern that was mentioned by The Rare Vintage Auto Parts Ltd personnel was that the intermittency between Kalamunda and Joondalup store was more frequent. Connectivity to the Bayswater inventory is reliable but there are now errors in shipment because of an untraceable error. Orders arrive in correct order but when the automated deliveries are sent out quantities are wrong for 60% of orders causing massive restocking costs and loss of reputation.

The owner believes that the ex-IT Administrator is behind this as he was responsible for the commissioning of wireless systems, links, tills and deployment of the wireless network where all the shops including main head office/store would be able to communicate wirelessly. Police have been unable to respond or provide any detail. The person supporting the issue with the SQL inventory system has been unable to provide any data to explain the shipping errors. The account passwords and other traces of the old IT administrator have been cleansed from the system and were not traceable any more.

Current Wireless Installation Details -

The information provided below was the only information that was left behind in a file by the ex-IT administrator found in one of the file cabinets.

• All sites are using 16Dbi omni-directional antennae's on 16 meter towers with 2 Watt injectors that connect to 200mw APs (Linksys WRT54G)
• The APs in the store are a mix of Cisco 1200 series APs
• Managerial AP is Cisco 1200 series at 100mW
• Inventory AP is Netgear WG602 at 100mW with 6dBi antenna
• Wireless cards are a mix of 802.11b and g cards from Netgear, Proxim and DLink
• There are some wireless tills
• WEP Encryption is being used
• SSID is Rare Vintage Auto Parts Ltd and is broadcasting
• No Firewall, VPN or other countermeasure except virus protection
• All Infrastructure is running on 172.16.0.0/16 network

Note: All the provided data for the current wireless installation details might not be the correct setup and it will be your responsibility to make the necessary assumptions while accounting for the new wireless design and deployment.

Task Details -

Your report should detail the points as indicated in the Marks Allocation Guide below with the marks allocation and be addressed primarily to the management of Rare Vintage Auto Parts Ltd who are not security or IT experts. Please note - the list of current installation above is NOT a list of issues - it is your job to identify the issues and to address them all in your report submission.

Some issues may require the acquisition of new software and hardware; you should identify suitable products that could be used to resolve the issues. Your solution should exemplify best practice and produce a secured wireless installation for Rare Vintage Auto Parts Ltd. The use of appendices is encouraged. Material in appendices does not contribute to word count. You have also been tasked to design and create a Bring Your Own Device Policy (BYOD) for Rare Vintage Auto Parts Ltd which was supposed to be implemented along the wireless network.

Risk Identification & Analysis -

Weak encryption, broadcast SSID, incorrect antenna type, high power gain of APs, same subnetwork for all infrastructure devices, no firewall/IDS/VPN, no network policies and procedures, no DR, no backup, mix of network card standard (b and g)/ Identify and explain remedies to each identified issue - Risk Assessment matrix.

Selection of appropriate countermeasures to reduce risk -

Selection of appropriate countermeasures to selected risks in the above section and how to reduce the risks involved in the scenario.

Selection of appropriate hardware and software to deploy selected countermeasures and outcomes -

Selection of appropriate hardware and software to deploy selected countermeasures and outcomes - this includes Logical network plan (Layer 3) and Low level Network Diagram (Layer 2), Outline/indicate routing and also countermeasures used / Document necessary change of wireless network design or configuration

Development of Appropriate Policies/Guidelines -

This would be the BYOD policy that you have been requested to design and create.

Report Length: 4000-5000 Words.

Attachment:- Assignment File.rar