On your local system (exit from your AWS instance), you used an SSH command to log on to your AWS Ubuntu instance. There is a neat configuration file that can be used to create an alias of sorts. Read the resources for this section, then configure the .ssh/config file for your user on your system with information on your ssh connection to your AWS instance. 1. Write the command you have been using to ssh in to your AWS instance. 2. Provide the HostName (IP address) of your AWS Ubuntu instance: 3. Provide the user name that you are logging on to the system with: 4. Provide the absolute / full path to the private key (Identity File) on your local system: 5. On your local system, edit ~/.ssh/config to contain an entry with information about logging on to your AWS Ubuntu instance. Note that the answer template wants the contents you wrote to the file. 6. Write the new form of the ssh command to connect to your AWS instance. Resources linuxize - Using the ssh config file cyberciti.biz - config file examples The Port, if you wish to include it in your config is 22
Added by Isabel O.
Close
Your feedback will help us improve your experience
Akash M and 78 other AP CS educators are ready to help you.
Ask a new question
Labs
Want to see this concept in action?
Explore this concept interactively to see how it behaves as you change inputs.
Key Concepts
Recommended Videos
In this homework, there is no need to worry about AWS Cloud 9. We will be demonstrating various vulnerabilities related to porous defenses. These vulnerabilities include Missing Encryption of Sensitive Data, Use of Hard-coded Credentials, Missing Authorization, Missing Authentication for Critical Function, Incorrect Permission Assignment for Critical Resource, Incorrect Authorization, Execution with Unnecessary Privileges, and Reliance on Untrusted Inputs in a Security Decision. You will be required to provide unique code examples that contain the vulnerabilities and then provide an updated version of the code that fixes the vulnerabilities. Additionally, you should explain why the original code was vulnerable and discuss specific attack methods that a user could try to exploit the vulnerabilities. Finally, you should discuss how the new code fixes the vulnerabilities. Please make sure to thoroughly read and understand the materials in weeks 5 and 6 before starting this assignment. Assignment Details: 1. Select 2 vulnerabilities from the CWE/SANS Top 25 list under the category of Porous Defenses. The specific issues you can choose from are: a. Missing Encryption of Sensitive Data b. Use of Hard-coded Credentials c. Missing Authorization d. Missing Authentication for Critical Function e. Incorrect Permission Assignment for Critical Resource f. Incorrect Authorization g. Execution with Unnecessary Privileges h. Reliance on Untrusted Inputs in a Security Decision Review and try the existing examples provided in the links in the classroom. Use AWS Cloud 9 to experiment with these vulnerabilities. You can work in multiple languages if possible. 2. Using AWS Cloud 9, create your own unique examples for each of the 2 vulnerabilities chosen in the previous step. 3. Your code examples do not need to be large or fully functional from an application standpoint. However, they should include all the necessary code to fully explain and correct the vulnerabilities. 4. Use the information provided in the CWE/SANS Top 25 vulnerabilities to understand and experiment with the vulnerabilities. 5. Make sure your documentation and descriptions are detailed and complete. 6. You may need to conduct additional research to better understand the vulnerabilities or the features associated with a specific programming language. 7. Document the vulnerabilities and describe how the issues were specifically corrected. Note: You may need to conduct additional research to better understand the vulnerabilities or the features associated with a specific programming language.
Akash M.
This assignment will require a little bit of research on your part as you're going to change a configuration file to affect the way the SSH server operates. Some of these options are already listed in the configuration file, such as the listening port, but denying/allowing a user is not. Make sure you have at least two accounts on the VM acting as your SSH server - one which should be allowed to log in via SSH and the other which should not later. Install OpenSSH server: sudo aptitude install openssh-server Make the following changes to the sshd_config file. If you're having trouble locating the file, you could Google for the location or 'find' the file. 1. SSH should listen on port 555. 2. SSH should only use SSH Protocol 2. 3. SSH should allow only one of your accounts to log in; the other account should be denied. 4. Deny root logins, meaning root cannot log in to the server via SSH. 5. Make accounts with empty passwords unable to log in. 6. Enable the option which displays a banner when logging in. Create your own banner and have fun with it! For the changes in the configuration file to take effect, restart the SSH service so the configuration file is reread: sudo /etc/init.d/ssh restart Deliverables: 1. Your changed sshd_config file (NOT a screenshot of your config file! I want the file). 2. A screenshot of the terminal showing one user account being denied and the other successfully logging in, which should also display your custom banner. Zip those two files together to firstName.lastName.5.zip, and that's your submission!
AWS Solutions Inc. currently has the above architecture in place for their application. Upon some research, the organization's cloud architect is recommending the following tools to secure their environment: - AWS Network Firewall - AWS Security Groups - AWS GuardDuty This assignment will require some self-study! All three of these services have been covered in this class, but you will have to reference the AWS documentation, textbook, or augment with other resources in order to be able to describe what the implementation of these services would look like. Deliverables: It is your job to provide the following for each of the above tools: - At least 100 words explaining how to implement the tool in this environment, such as: - Where the tool will sit on the above diagram - Key considerations for implementation from course materials - Example CLI commands for implementing the service
Recommended Textbooks
Computer Science and Information Technology
Introduction to Programming Using Python
Computer Science - An Overview
Transcript
Watch the video solution with this free unlock.
EMAIL
PASSWORD