Security Tools Manual - Group A

 INTRODUCTION

Based on the subtopic that are given, the subtopic that our team choose are remote access, data recovery and ftp application. The tools that our team choose based on the three subtopic are Puran File Recovery, Ultra Viewer and WinSCP. 

Remote access is the ability for a person to access a computer or a system that is connected to a network without being physically present at the target computer or system. It allows the person to gain access to control the system or computer from a distance. With good intention, it will allow user to work off-site such as maintaining a server in the office.

Next, data recovery is a proces of recovering or restoring data that has been lost, deleted or corrupted. Data recovery also can be referred as restoring a data from a back up data that is stored in another location.

Lastly, the process of transferring files between devices via a network is referred to as file transfer protocol (FTP). When one party permits another to send or receive files via the Internet, the operation is successful. The cloud, which is often a safe area that is held remotely, is now frequently used to store files. It was first utilised as a mechanism for users to communicate and share information between two physical machines.

1. Puran File Recovery

a. Installation Manual

1. Go to https://www.puransoftware.com/File-Recovery-Download.html to download the tool.

2. Run the setup.exe

3. Click Next

       4. Accept the term and agreements and click Next

       5. Select the path to install the tool.

     6. Select to either create a desktop icon or not. Then click Install.

      7. After the installation process has completed. Click Finish.

b. Demonstration of tools

1. Run the application

2. Select the desired language and click ok.

3. Select the drive the user wants to scan. Users also can choose what type of data to scan for example pictures, documents or videos. Then click scan

4. After the scan has completed, it will display all the data that has been found

5. Select the data to be restored and click Recover. On the right side will display the data           preview. Click Just Recover

6. Select the destination and click OK

7. A pop-out wil appear notifying the user. Click ok

8. After the data has been recovered. A pop out will appear.

c. Analysis on CIA between the selected tools (Confidentiality, Integrity and availability)

        Puran file recovery does not have good confidentiality because all user can be access in using the operation as you can see in below image all user can do an recovery file that have been missing in the device (laptop/computer).

All user can just open and use the tools without need to login.

        As for integrity, Puran file recovery is also not good for integrity because all files that have been recovered after the recovery operation can be accessed and edited by all users that know the location of the recovery path file. Below image is the file path recovery that has been choose by the user.

All user can edit, moved and doing something with the file that have been recovered.

        Lastly, as for availability, Puran file recovery has good availability because users can able to find the file that has been deleted by searching at the file location that has been deleted. As from the image bellow it shows that user able to find the missing file by scan the specific folder.

All user can find the missing file by searching it at the location file that has been deleted.

2.Ultra Viewer

a. Installation Manual

1. Go to https://www.ultraviewer.net/en/download.html to install the tool.

2. Run the setup.exe

3. Select the installation path and click next

4. Click Next.

5. Click Next

6. Click Install

7. After the installation process has completed. Click Finish.

b. Demonstration of tools

1. Run the application

2. On the first screen user will see the ID and password is already given.

3. User can choose to set own ID and password by clicking the key icon next to the                      custom password on the bottom of the window.

      4. To connect to the other computer, enter the get the other computer ID and password              and click Connect to partner

      5. Once the computer is successfully connected. It will display the connected computer              screen.

      6. To transfer file between computer, click the arrow on the right side of the screen to open            the chat function. Then drag any file/data into the chat box.

      7. Then, to disconnect. Just close the window that display the other computer screen.

c. Analysis on CIA between the selected tools (Confidentiality, Integrity and availability)

        Based on the analysis that has been carried out in terms of confidentiality, integrity and availability. Firstly is confidentiality. Ultra Viewer has good confidentiality because the user needs to enter the id and the password of the computer that needs to be controlled. The user also can set up their own custom id and password

Figure above shows that the user need to enter the partner id and password before controlling the computer.

Figure above shows that the user can set their own custom id and password.

        Next is the integrity, the Ultra Viewer has moderate integrity. This is because the if the owner of the controlled user is present. The owner can see  what the controller is doing to their computer. However if the owner is not in front of their computer, Ultra Viewer does not have any ways on knowing what changes has been made. Ultra Viewer only save the user that is connected to the computer in a log file.

The figure above show the log file of the user that is connected to the computer

        Lastly is the availability. Ultra Viewer has moderate availability. This is because when the user needs to access files on the other computer. Both computers must run the Ultra Viewer application before the connection for both computers can be established. If one of the computers does not run the application, the connection cannot be established.

3. Puran File Recovery

a. Installation Manual

1. Go to https://winscp.net/eng/download.php to download the tool.

2. Run the setup file.

3. The first screen the user will encounter is the ‘License Agreement’ screen.

Click ‘Accept’

4. Pick ‘Typical Installation’, and click ‘Next’

5. Select either UI style, in this example we will choose the ‘Commander’ style.

6. Click ‘Install’

7. After the installation has finished. Click ‘Finish’

b. Demonstration of tools

1.Run the application

2.The first screen that the user will see is this:

3.This login screen is for the user to determine which hostname is used for transferring            files.

4.The user can get a hostname by creating an account on domain hosting websites.

5.In this example, the website used is https://www.infinityfree.net/ .

6.Fill in the Hostname, Username, and Password that is given from the website.

7.Since the hostname only allows FTP for its file protocol, change the file protocol from the         top of the menu to FTP.

8.After the user has clicked on the login button, they will be redirected to the main screen.

(The left half of the screen are your files that are located inside your computer, while the right part of your screen are the folders that are located in your created domain)

9.To view and edit the files from the created domain, the user can use the ‘File Manager’             option provided from their hosting website.

10.In the case of Infinityfree, the user can go to their profile and click the ‘File Manager’               button.

11.The user will then be redirected to a new window, which shows all the files in the                  domain.

12.To upload a file to the domain, the user can just simply drag and drop the file from their            computer, to the domain.

13.A file transfer progress will show.

14.The file will then be shown in the left half of the screen.

15.The will also show in the ‘File Manager’ of the domain website.

16.If another user wanted to access these files, they can just use the Username,                      Password, and Hostname from before to login into WinSCP.



c. Analysis on CIA between the selected tools (Confidentiality, Integrity and availability)

        Based on the analysis that has been carried out on WinSCP, in terms of confidentiality, the tool offers good confidentiality since it requires the user to insert the hostname, username, and the password for them to use the  domain.

        Figure shows the dialog box to enter Hostname, User name, and Password.

        Furthermore, in terms of Integrity WinSCP has a feature to compare the files between the file in the domain and the file in your computer.

        1.Right click on the file on whichever location(left half or right half) and hover over to ‘File Custom Commands’ and select ‘Compare Files’

        2.A progress will show up and the command line interface will be opened showing if there’s any difference of the file in your computer and the file in the domain.

        3. Lastly, in terms of Availability, WinSCP is available for use everytime you log in to the tool. The files in the domain is also available everytime you use WinSCP.