National University of Sciences & Technology (NUST)

School of Electrical Engineering and Computer Science

(SEECS)
Faculty of Computing

Spring 2024: CS 484 Information Security (3+0)

Semester Project [Group]

CLO2: Analyze real world scenarios in perspective of C-4 PLO-3

information security and model them using different (Analyze) (Problem Analysis)
security measures.

CLO3: Apply the concepts of confidentiality, integrity, C-3 PLO-4

and availability, using different tools and techniques. (Apply) (Design / Development
of Solutions)

Announcement Date: 21/03/2024 Maximum marks: 40 Due Date: 23/05/2024

Steps:

1. Select one security attribute (Confidentiality, Integrity, Availability, Authentication,

Access Control).

2. Design and develop a new security mechanism/protocol to provide the security

attribute selected in step 1.

3. Implement the new security mechanism/protocol using a programming language

/ setup of your choice.

4. Test the new security mechanism/protocol and demonstrate that it provides the
security attribute selected in step 1.

5. Develop an attack (e.g. brute-force) against the security mechanism/protocol and

demonstrate how it can be used to compromise the security attribute selected in
step 1.
Deliverables:

Prepare a presentation (12 presentation + 3 Q&A = 15 min for a group with 3 members)
that includes a:
● Introduction with definition of the selected security attribute and motivation.
● Design of the new security mechanism/protocol.
● Implementation details of the new security mechanism/protocol.
● Demonstration of how the new security mechanism/protocol provides the
selected security attribute.
● Demonstration of an attack against the new security mechanism/protocol. The
attack should clearly compromise the selected security attribute.
● Conclusion and Recommendation. This should include how the new security
mechanism/protocol can be improved to provide protection against the attack
demonstrated in step 5.
● Contribution and work division of each group member.
● References

Guidelines for submission:

● Only one submission is required for each group.

● A soft copy of the slides (for the presentation) have to be uploaded on LMS by
the due date.