95-752 Homework Assignment #2
Due 5:30pm 11/12/2009

A.  “FlightFree” has decided to open several branch offices in major cities (Miami, Washington DC, Houston, Los Angeles, and New York).  The Seattle branch was opened by buying out a smaller (fictitious) competitor, “SecureFlight”. 

1.   What are the exposures in the FlightFree expansion,  irrespective of the computer connectivity?

2.   FlightFree plans to connect their offices via the internet, using a firewall at each site with encrypted traffic between the firewalls. Contacts with airports sites would be through VPNs to the closest office.  What vulnerabilities might this connection method have?

3. SecureFlight was using a specific commercial data backup and restore software product in its customer support. While studying this product with an eye to wider usage within FlightFree, a significant vulnerability was discovered that could lead to disclosure of customer data to other customers. What techniques described in class might be helpful in controlling this vulnerability”?  What role would each technique play?

B.   Answer the following questions:
1.   Explain why a network access policy is critical to use of a network firewall.

2.   Explain two ways in which network security personnel may monitor their network to detect malicious network traffic.

3.   What security concerns would you raise during the purchasing negotiations for new firewall systems?