Crypto Security Architecture ExerciseScenarioYou work for the Ape

Crypto Security Architecture ExerciseScenarioYou work for the Apex Trucking Company. This is a firm that moves materials forclients all over North America and Europe. The leadership of the company has no realknowledge of technology, but wants to use encryption to protect the information thecompany has. The information to be protected consists of future marketing plans for thecompany, financial data, employee records, customer records, and customer shippingdate.The company wants the capability to securely allow customers to track their orders in realtime from their origin to their destination on-line over the Internet. The information thatis to be supplied to customers is tracking number, location of shipment, size of shipment,value of shipment, and estimated time of arrival as well as the customer contactinformation for this shipment.While this information can be made available from a central server, the marketing groupsin Europe, Mexico and Canada need management access to the data to enter newshipments and change orders before they ship.The company currently is using desktops running Windows XP and Windows basedservers. There are only passwords used for security, and a firewall, but no encryption toprotect the information.The project is to provide the above capability securely using encryption, as well asproviding additional security to the company via encryption. You will need to addressnew technology, the reasons and costs behind your choices, and what policy and legalimplications there are to your encryption solutionThere is at least one marketing group in Mexico, Germany, and Canada, as well as threein the US. The company is based in New York. It is important that customers can relyon the shipping data being accurate, and from the company.You’re assigned this crypto architecture project.ConfigurationThe current configuration has one server acting as a firewall and web server. This serveris directly attached to the Internet.There is a database server behind the firewall, as well as a separate server for HR andmarketing. The marketing server needs to be securely accessed by the marketing teams.They also need to access the database server through an Internet connection to managedata and display reports.All databases use MySQL and are currently not secured.ConstraintsYour tasking is crypto architecture. The normal replacement of computers is done on arotating schedule. It is outside the scope of your project to plan for the replacement ofcomputers. Your architecture should work with the computers you have. You mayconsider the replacement of equipment if an upgrade or new equipment would be criticalto the crypto architecture.Specific TaskingYou have been specifically tasked to do the following things and develop a complete andsound crypto architecture. Remember, the president is very knowledgeable aboutcryptography and wants lots of details about how you are going to implement theencryption.1. Describe in detail what new cryptographic systems you are going to propose, howthey work, and how they will enhance security. Be specific about these systemsweaknesses and how you plan to compensate for the weaknesses.2. Describe and explain the impact the new cryptographic security architecture willhave on the current security features and how this impact will be mitigated.3. What new issues will arise as a result of implementing the new cryptographicsolutions and what are the arguments on either side of these issues?4. Show a clear and detailed understanding of the existing encryption being usedsuch as passwords, and operating encryption features not being used and whetheryou plan to use these or not, and if not why not.5. How well will all these new cryptographic features work together? Identify anyareas of concern, and how you propose to resolve conflicts and issues.6. What if any current security features can be eliminated cost effectively by the newcrypto architecture?Have fun!