Communications Security

* The goal of this assignment is to develop a security policy and develop an evaluation strategy for a system with respect to that policy. The system to be evaluated is up to you. Suggestions include : A well defined application (e.g., the departmental web page or forums ) What you need to do is : 1. Describe the system and the environment in which it operates . 2. Develop and describe a reasonable security policy. 3. Possibly describe additions to the system or assumptions you need to make to reasonably have a hope of meeting your security policy. An example might be a user authentication system where none currently exists. [login to view URL] an evalutaion strategy : formal evaluation , verification testing, etc? Describe what you would need to perform the evaluation. characteristics of the evalutaion (e.g., if using common criteria, give security functional requirements from the common [login to view URL] doing penetration testing, describe the composition of red and blue teams , aswell as the environment youwould need to set up to do the testing.) You dont actually need to evaluate the system - just describe how the evaluation would be done . Limit your write up to 5 pages, 12 point type with 1.5 spacing ## Deliverables 1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done. 2) Deliverables must be in ready-to-run condition, as follows (depending on the nature of the deliverables): a) For web sites or other server-side deliverables intended to only ever exist in one place in the Buyer's environment--Deliverables must be installed by the Seller in ready-to-run condition in the Buyer's environment. b) For all others including desktop software or software the buyer intends to distribute: A software installation package that will install the software in ready-to-run condition on the platform(s) specified in this bid request. 3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement). ## Platform nothing