Technical Essay and video responce
Budget: $10 – $30 AUD
Scenario:
Company ABC Pty Ltd is an online education provider that provides short courses for aspiring creative writers, freelance writers, business writers and copywriters. When a student enrols with ABC Pty Ltd, a separate student account will be set up. This account is connected to the student’s personal details including address, location, phone numbers, email, and prior education credentials. The account is also connected to the student’s enrolment information, grades, and billing information. The student can access all their information using two-factor authentication that includes a user selected password and OTP sent to their email.
Each user’s data is stored in ABC Pty Ltd’s central datacentre. Each user record is protected using AES-256. The AES key is derived from the user generated password using a Key Derivation Function (KDF). When a user needs to view or edit their record, the data is decrypted using their secret key generated by their password, changes on the records are done and the updated record is re encrypted in the database.
ABC Pty Ltd have been recently very concerned with the scale of data breaches hitting well known organisations and are feeling uneasy about storing their students’ personal data and secret keys in their in-house datacentre. They are on the lookout for a better data storage and user authentication solution.
You are a cybersecurity consultant and have just read TIDE’s whitepaper and learnt about TIDE’s solution to decentralised authentication. You want to educate the senior management of ABC Pty Ltd about this new option to decentralise authentication and propose a better solution to what they currently have.
Assessment 3 Part A :
Write a technical essay to the senior management of ABC Pty Ltd to create a case for the adoption of decentralised authentication by ABC Pty Ltd. The essay must not exceed 1000 words, including all references. This essay must be in professional English and must include academic standard referencing of your sources. All claims must be evidence based and relevant examples must be provided.
Word limit penalty: For reports that exceed the 1000 word limit, only the first 1000 words will be assessed.
Some of the points you may include, but need not be limited to are:
a. The scale and impact of damage if there was an attack on ABC Pty Ltd’s central database and how that could be executed by attackers, based on what you can find about recent data breaches.
b. The importance of keeping each user’s AES key secure and traditional ways this has been done
c. The concept of decentralised authentication and a professional, plain English explanation of how that can be accomplished using public key cryptography and secret sharing schemes.
Company ABC Pty Ltd is an online education provider that provides short courses for aspiring creative writers, freelance writers, business writers and copywriters. When a student enrols with ABC Pty Ltd, a separate student account will be set up. This account is connected to the student’s personal details including address, location, phone numbers, email, and prior education credentials. The account is also connected to the student’s enrolment information, grades, and billing information. The student can access all their information using two-factor authentication that includes a user selected password and OTP sent to their email.
Each user’s data is stored in ABC Pty Ltd’s central datacentre. Each user record is protected using AES-256. The AES key is derived from the user generated password using a Key Derivation Function (KDF). When a user needs to view or edit their record, the data is decrypted using their secret key generated by their password, changes on the records are done and the updated record is re encrypted in the database.
ABC Pty Ltd have been recently very concerned with the scale of data breaches hitting well known organisations and are feeling uneasy about storing their students’ personal data and secret keys in their in-house datacentre. They are on the lookout for a better data storage and user authentication solution.
You are a cybersecurity consultant and have just read TIDE’s whitepaper and learnt about TIDE’s solution to decentralised authentication. You want to educate the senior management of ABC Pty Ltd about this new option to decentralise authentication and propose a better solution to what they currently have.
Assessment 3 Part A :
Write a technical essay to the senior management of ABC Pty Ltd to create a case for the adoption of decentralised authentication by ABC Pty Ltd. The essay must not exceed 1000 words, including all references. This essay must be in professional English and must include academic standard referencing of your sources. All claims must be evidence based and relevant examples must be provided.
Word limit penalty: For reports that exceed the 1000 word limit, only the first 1000 words will be assessed.
Some of the points you may include, but need not be limited to are:
a. The scale and impact of damage if there was an attack on ABC Pty Ltd’s central database and how that could be executed by attackers, based on what you can find about recent data breaches.
b. The importance of keeping each user’s AES key secure and traditional ways this has been done
c. The concept of decentralised authentication and a professional, plain English explanation of how that can be accomplished using public key cryptography and secret sharing schemes.