Welcome to Team Pwnage CCSP Case Study

We have been presented a scenario in which a hacker named Jason has infiltrated a network owned by a company called The Cube Farm. The network administrator at The Cube Farm, Doug, has made Jason's task of hacking a very easy one because he has left several security loop holes open and thus leaving the network subsetible to hacking. It is now up to Team Pwnage to come into the spot light and investigate how Jason got in, what tools he used, and what can be done to fix the problem to stop people like Jason from ever getting in again.

Team Pwnage is a group of crime scene IT investigators. Armed with log files and the historical data, it is our duty to build a case against the criminals who have perpetrated this dastardly deed. We will use the appropriate software and/or hardware tools available to record, track and capture the culprit responsible for infiltrating the firm's corporate site.

Roles and Responsibilities

The following are the roles and responsibilities which each member has taken to complete the investigation of the network intrusion of the “Cube Farm”.

Gabriel Abed

Gabriel Abed was required to compile all work, and then implement it into a webpage, which he has created for this case study. He created all diagrams required for the webpage, and aided in the creation of the video. He created the skit for the movie detailing actor roles, lines and responsibilities.

Stephanie Bagot

Stephanie Bagot was responsible for reporting of the Cube Farm problem and solution which included creating a new running configuration for the router which included security. She was also responsible for creating the character profiles and determining the sentencing for the criminals.

Brian Greenberg

Brian Greenberg was responsible for drawing out the Cube Farm topology for investigative purposes. He was also responsible for reporting on the network interference issues which occurred at the Cube Farm including how the hacking occurred and what should be done as a solution.

James Jurrius

James Jurrius was responsible for reporting on security advancements for intrusion detection software which would be implemented into the Cube Farm Security Policy. He also aided in the creation of the video.

Anthony Pece

Tony Pece was responsible for understanding the tcp dump files recorded by the ISP as well as reporting on the hacker’s use of Cisco Scanner to infiltrate the Cube Farm network.