ICS: Written Homework: Rational Paranoia

Go up to the ICS HW page (md) | view tabbed version

Overview

This assignment will focus on analyzing security in three different scenarios; two of which you choose from the list below, and one of which you create yourself. The deliverable is a typed PDF document. You will need to be familiar with the Security Mindset slide set.

You will want to see the homeworks policies page (md) for formatting and other details. The due dates are listed on the Canvas landing page.

Changelog

Any changes to this page will be put here for easy reference. Typo fixes and minor clarifications are not listed here. So far there aren’t any significant changes to report.

Assignment

For each of the three total scenarios (two from our list, one of your own, as explained below), imagine that you are in charge of security. Apply the security mindset, discussed in the security mindset slide set, to answer these questions:

• What assets are important for you to protect?
• What security threats will you choose to defend against?
• What countermeasures can you justify, in terms of costs and benefits?

Answer each of the above in the form of a bulleted list, with brief justifications or explanations as necessary. State any critical assumptions you decide to make. Your grade will be based on the thoroughness, realism, and thoughtfulness of your analysis. We are more interested in quality than quantity. But if you want a length estimate, then one or two sentences for each “brief_explanation”, below, is reasonable. That being said, as long as you are being concise and not adding in fluff (see here (md) for a definition of fluff), they can be longer.

Pick two of the following scenarios.

• You are now in charge of ensuring that UVA students can express their first amendment rights through protest, while also ensuring the safety of the protesters and the UVA community.
  • NOTE: This is a security analysis, not a chance for political opining. Regardless of what side you are on, focus on the security aspects. There are many great ways to express your political opinions, but doing so in the answer to this question on this homework is not one of them. As long as you focus on the security aspects, any political views that come out will have zero effect on your grade for this question.
• You are in charge of designing a new TSA airport checking process.
• You are tasked with creating a policy to ensure the secure voting in the 2024 presidential election.
  • Again, like the first scenario, keep politics out of your answer, please.
• You are in charge of protecting the water supply to a town or city, which is sourced from a reservoir that is publicly usable and easily accessible.

In addition, come up with another scenario from everyday life that we have not discussed in class. Your choice can be directly related to computer security, but it does not have to be.

Submission Template

Obviously reformat this in your word processor of choice. The file to be submitted MUST BE A PDF DOCUMENT. Please name it paranoia.pdf. The page must be exactly three pages long, and each case must be on a separate page. The case that you come up with must be on page three. This is all to facilitate grading – the document is going to be split by pages, and each page will be graded separately.

1. (name_of_example)

[Assumptions: explain_assumptions]

Assets:
- Asset X: brief_explanation
- Asset Y: brief_explanation
- ...

Threats:
- Threat X: brief_explanation
- Threat Y: brief_explanation
- ...

Countermeasures:
- Countermeasure X: brief_justification
- Countermeasure Y: brief_justification
- ...

----

2. (name_of_example)

...

----

3. Original Scenario

explain_your_scenario

Assets:
...
Threats:
...
Countermeasures:
...

File to submit

Submit the above as a PDF document, named paranoia.pdf. Make sure you follow the formatting guidelines mentioned above! In particular, each case should be on its own page, and the document should be exactly three pages long.

The submission is via Gradescope.