5.0 Assignment 2: Marking Schedule
The table below provides information on the grading used for marking. Each task is divided into specific activities that you will be graded on. For each activity the points have been specified, which add to 100.
* You are required to complete a self-assessment for each activity. This requires you mark the Completed column with a tick if completed (), a circle if partially completed (), or a cross if not attempted (). You can leave comments in the “self-assessment comments” field; for example, what parts of the task you did not finish.
** Please do not fill out anything in the Result column. The lecturer uses this field to insert the mark achieved.
Activity Points Completed* Result**
Task 1: Server Hardening Implement inbound firewall rules 7.5
Self-assessment comments:
Lecturer feedback:
Implement outbound firewall rules 7.5
Self-assessment comments:
Lecturer feedback:
Task 2: Service Hardening Secure configuration of SSH 10
Self-assessment comments:
Lecturer feedback:
Setup Fail2Ban correctly 10
Self-assessment comments:
Lecturer feedback:
Task 3: SQL Injection Attack Mitigation Find 2 SQL injection vulnerabilities 5
Self-assessment comments:
Lecturer feedback:
Fix 2 SQL injection vulnerabilities 15
Self-assessment comments:
Lecturer feedback:
Task 4: XSS Attack Mitigation Remove XSS exploit 5
Self-assessment comments:
Lecturer feedback:
Fix the XXS vulnerability 15
Self-assessment comments:
Lecturer feedback:
Task 5: Password Hashing Hash existing user passwords 10
Self-assessment comments:
Lecturer feedback:
Update login.java to include password hashing 15
Self-assessment comments:
Lecturer feedback: