CSI3302 Assignment 2 – If you build it, something something something ...
Background
Now that you have a plan, it is time to implement it. Using WMWare Player (http://www.vmware.com/products/player) you should now install Server 2012 and SQL Server 2012 according to your plan. The goal is simple; you are to install the O/S, the Database Server and create a database and then secure it all as best you can.
Task Details
In assignment 2 you will be installing Windows 2012 Standard Server and the MS SQL Standard database.
In order to do this, you should have a set approach that outlines what you need to do, how to do it, in what order and why you are doing it. You should already have this plan as the result of Assignment 1.
You are required to, using VMWare Player as your Virtual Environment, install Server 2012, MS SQL 2012 and the supplied database (You can get Microsoft software from the MSDNAA). You are then required to secure it in accordance with your plan.
Finally, you are asked to reflect on your task and write a summary. While it is not worth the most in terms of marks, it is probably the part that will benefit you the most.
• What happened as opposed to what you planned to happen?
• What did you do that you didn't plan for?
• What did you plan for that you didn't do?
• What part of your plan stayed the same and what changed?
• What did you learn from this exercise and what would you do differently next time?
This should be short but it is an important step none the less.
Marks Worth 30% of the total marks of the unit
Reflection Length 1500+ Words
Due Date Week 11 (exact date listed on Blackboard)

Submission Instructions
Reflection:
The reflection should be set out in the following manner:
• 11 point Times New Roman
• 1.5 line spaced
• Margins set to 2.5 cm??Justification - block justified
• Footer – Should contain your StudentID and Full Name (8 point type) and a Page number
You are required to submit a softcopy to your Lecturer with the Subject Line CSI3302 Reflection and submit it via blackboard (include your MD5 hash in the comments). The marking allocation for this assignment is at the end of this document. If any point is unclear send an e-mail, phone or make an appointment well before the assignment is due with your lecturer.
NOTE: Submitting a softcopy is NOT a synonym for EMAIL. Submitting to Blackboard is a -softcopy-. At no point do I request you email me your final assignment!
Virtual Image:
• 2 GB or Under: If the image is under 2GB or can be compressed to under 2GB, please submit to Blackboard.
• 2 GB or over (Blackboard will not play well with files over 2GB):
o You can have me mark this in the tutorial in Week 12. (Monday, 15:30, ML13.224) OR
o You can submit this on a USB drive, along with an assignment cover sheet, in the Assignment Drop Box in Building 13, ML.
o You can submit this on a USB drive, along with an assignment cover sheet, by mail to your lecturer at:
? School of Computer and Security Science
? Edith Cowan University
? 2 Bradford Street
? Mount Lawley WA 6050
Referencing
All sources of references must be cited (in text citation) and listed (end reference list). For details about referencing and the required format, please refer to the ECU Referencing Guide, which can be found from the following URL: http://www.ecu.edu.au/LDS/pdf/refguide.pdf
Plagiarism
Please ensure that you have read and understood the information on plagiarism provided on the site for this unit and read the Academic Misconduct Rules. Should you not reference correctly or be caught copy or plagiarising others work the penalties for this are mandatory and serious. Repeat offences in other units may result in course termination. If you are unsure consult with your lecturer or the Faculty Academic Skills Adviser before submitting your work for assessment.
CSI3302 Assignment 2
Marks Allocation
O/S Security. (6 marks)
This will cover areas such as but not limited to:
• Have you enabled the security features in your plan?
• Have you enabled security features that were not in your plan?
• Are the essential features enabled? (lectures/guides/vulnerability scanners/ updates)
• Has the server been hardened?
• What auditing systems are in place?
MS SQL Database Security (6 marks)
This will cover areas such as but not limited to:
• Have you enabled the security features in your plan?
• Have you enabled security features that were not in your plan?
• Are the essential features enabled? (lectures/guides/vulnerability scanners/ updates)
• Has the Database Server been hardened?
• What auditing systems are in place?
Database Security (6 Marks)
This will cover areas such as but not limited to:
• Have you enabled the security features in your plan?
• Have you enabled security features that were not in your plan?
• Are the essential features enabled? (lectures/guides/vulnerability scanners/ updates)
• Has the Database been hardened? (exploits have been considered, etc)
• What auditing systems are in place?
Reflection (10 marks)
• What happened as opposed to what you planned to happen?
• What did you do that you didn't plan for?
• What did you plan for that you didn't do?
• What part of your plan stayed the same and what changed?
• What did you learn from this exercise and what would you do differently next time?
Presentation (2 marks)
• Grammar, Spelling
• Report Format
• Overall Presentation
• Appropriate for intended audience