Capstone Site Overhaul · Web viewEcho Team Capstone Site Overhaul Functional Specification Kyle Molin | Jarrett Lynn | Ethan Fletcher

Prepared for

Andrew Campbell and SAIT

Echo Team

Capstone Site Overhaul

Functional Specification

Kyle Molin | Jarrett Lynn | Ethan Fletcher000779467 | 000782938 | 000782845

Table of ContentsExecutive summary.....................................................................................................................................3

Business Case..............................................................................................................................................3

Needs Assessment...................................................................................................................................3

Current Situation.................................................................................................................................3

Opportunities......................................................................................................................................3

Analysis....................................................................................................................................................4

Root Causes.........................................................................................................................................4

GAP Analysis........................................................................................................................................4

Known Risks.........................................................................................................................................5

Critical Success Factors........................................................................................................................5

Current Cost Breakdown.....................................................................................................................6

Recommendations...................................................................................................................................7

Recommendation 1: Automation of current process..........................................................................7

Recommendation 2: Hosting at SAIT with VPN....................................................................................8

Recommendation 3: Hosting at SAIT...................................................................................................9

Final Recommendation......................................................................................................................10

Scope.........................................................................................................................................................11

Methodology.............................................................................................................................................12

Assumptions + Constraints........................................................................................................................13

Functional requirements...........................................................................................................................13

WBS.......................................................................................................................................................13

Budget/Asset List...................................................................................................................................15

Components..........................................................................................................................................16

Hardware...........................................................................................................................................16

Software............................................................................................................................................17

Networking........................................................................................................................................19

Security..............................................................................................................................................20

Server Services...................................................................................................................................21

Gantt chart................................................................................................................................................23

Glossary.....................................................................................................................................................29

References.................................................................................................................................................30

1

User manual..............................................................................................................................................31

Project administration...............................................................................................................................33

Team Contract.......................................................................................................................................33

Team Schedule..................................................................................................................................33

Exceptions.........................................................................................................................................33

Expectations......................................................................................................................................33

Group communication.......................................................................................................................33

Penalties............................................................................................................................................34

Project Sign Off......................................................................................................................................35

2

Executive summaryThe current Capstone website has an over-convoluted process for the instructor. The current

process has many steps that are incredibly time consuming with 7 hours per semester used updating the site. Since there is no communication between the FTP server and the website Andrew Campbell must be a middleman for the process of updating the site. A single point of failure exists, considering only one instructor has the knowledge to complete the task of updating the site. With our proposed recommendation we will build a completely new solution offering direct student access to the site, a VPN to access the site off campus, and make the site public with a third-party SSL certificate so industry will be able to access an see all of the in-progress and finished Capstone projects SAIT students have created. For our recommendation the annual operating cost for this solution is reduced from $2,875.36 to $677.66, for an annual savings of $2,197.70, this gives SAIT an ROI of 76%.

Business CaseNeeds Assessment

Current SituationThe current Capstone website has an over-convoluted process for the instructor. This process

consists of students uploading their content to an on-site FTP server and having the instructor take the students work off the FTP server to then update the website. This process has many steps in between to delete the old information and replace it with the new that are incredibly time consuming with roughly 7 hours per semester used updating the site. Since there is no communication between the FTP server and the website Andrew must be that communication acting as a middleman. This takes up instructor time which could be used elsewhere to better help curriculum in the I.T. field at SAIT and being available to help students. With this, a single point of failure exists, considering only one instructor has the knowledge to complete these tasks.

With consideration of the current situation, the website is reliant on the third-party service HostGator in order to host the webpage. This puts the operation at a risk as it is a third-party service and there is no direct way to deal with a situation where the server may go down, or eventually the possibility of the third-party company shutting down.

OpportunitiesThere is a large amount of opportunity in this system to automate and make the Capstone site

highly adaptable for modern use. After learning about the current process of updating and maintaining the Capstone site, we have concluded that there is too much room for failure based on human error. 95% of the current process can be automated to remedy the long-term business need of giving more time to Andrew for course work, helping students, and having the system be highly adaptable with a lower learning curve for new instructors taking over the system. S.A.I.T and Andrew Campbell have expressed their desire to overhaul the current process and expand the functionality of the Capstone website as well as make it more appealing to industry. We believe that S.A.I.T. needs this overhaul to fully display the talent and time that goes into the Capstone Project.

3

Analysis

Root Causes1. There is no communication between FTP server and the website.2. Website is hosted on a third party

GAP AnalysisThe current situation the institution has relies on a third-party service to host its web page. With

the current server set up there is no direct way for students to update the website. The problem with this method is that there is no bridge between the hosting service and the server. In the current situation it requires an individual to bridge the gap via a manual upload process which takes long intervals of instructor time that could be spent elsewhere.

The desired approach is to automate the middleman process as well as have the platform completely first party with no need for a third-party service to host the webpage. It is important for students themselves to be able to update the webpage without the need for an Instructor. This approach should reduce the financial aspect as a third-party will no longer be required.

Our action plan is to reduce the process complication and time taken by adding automation, first party hosting, and in making a more secure environment with the following benefits:

Reduced costs Reduction of instructor time needed for management Allowing students to directly update the webpage Remote access Adding secure authentication

Current Potential Requires about 7 hours per semester Room for human error Potential of third party going down No direct student access Costs for HostGator required Lack of organization Single point of failure (one trained

instructor)

No third-party costs Full control of whole system Direct student access Better organization Redundancy (easy backend for

instructors, more than just one can use, possible RAID 1/1+0)

Easy learning process (more than just one instructor can use)

4

Known RisksTime Consuming

Instructor focused on website and not on students/obligations

Single point of failure

With only one trained individual there is a higher chance of failure if the instructor is unavailable

Lack of organization

With the lack of simplified steps, the process to complete the task is convoluted

Third-party may go down

Hosting on a third party may be unpredictable as the service may go down at any time

Complicated process

There are a lot of tedious and complicated tasks which can lead to human error as 95% of the process is manual tasks

The current process is running on a desktop

The current process is running on a desktop, instead of a secured server with redundancies

No modularity

The server is not virtual; if the computer fails there is no recovery

Critical Success Factors1. Students must be able to upload to the site without assistance.2. Each student has their own secure account.3. Site is accessible from anywhere (VPN or internet)4. Instructor time spent on website is dramatically reduced.

5

Current Cost Breakdown

Factoring in Instructor time, power of the unit, and the cost to host the website per year. SAIT is spending an estimated 2,875.36 per year on running the Capstone site.

Current:

Equipment/Resources Operating Cost – per Month

Labor Cost – per Hour

Time hr Total - per Year

Andrew Campbell $0 $85 7 $ 2,380 Desktop 200W $0.18 $0 24 $ 315.36 HostGator $15 $0 0 $ 180.00 Total $ 2,875.36

Current Hosting at SAIT Hosting at SAIT with VPN Automation $-

$500.00

$1,000.00

$1,500.00

$2,000.00

$2,500.00

$3,000.00

$3,500.00

Cost Current - per Year / Cost Projected - per Year

6

RecommendationsAll Recommendations given are within the scope of what we have learned at SAIT and can be accomplished within the time frame given for the Capstone project.

Automate the process of uploading files to website using current system with PowerShell. Hosting the web/storage system at SAIT, with use of a VPN for outside access Hosting the web/storage system at SAIT, with local access

Recommendation 1: Automation of current processThis recommendation suggests keeping the current hardware and creating a script to automate

upload to the site. With this solution it would not require the complete overhaul of the current process. The single point of failure would be reduced as other instructors would not need to be educated on the complicated process. Considering this, Instructor time would be reduced as the middle man would be replaced by a script. The script would be expected to search the FTP server for uploaded content, update the website with the content, and finally with use of the HostGator service it would host the website.

Benefits No overhaul needed Single point of failure reduced Overall Instructor time reduced Relatively quick completion time

Risks Possibility of third-party service shut down Original hardware's functionality Risk of breaking the original set-up or changing a critical function

Cost benefit analysisThe overall cost of this solution would be expected to drop to 1,175.36, factoring in the

reduction of instructor time. HostGator's service cost would remain as it would continue to be used.

Automation:

Equipment/Resources

Operating Cost - per Month

Labor Cost – per Hour Time hr Total - per Year

Andrew Campbell $ - $85 2 $ 680 Desktop 200W $0.18 $ - 24 $ 315.36 HostGator $15 $ - 0 $ 180.00 Total $ 1,175.36

7

Recommendation 2: Hosting at SAIT with VPNThis recommendation suggests replacing the current system with a website accessible from

anywhere that allows students to upload files themselves in a simplified manner. This recommendation offers more features than the other two. Most importantly, since it uses a VPN, it allows access even when off the campus network. By replacing the current system, it removes the instructor from being a single point of failure. Being accessible off the network may pose a security threat, to mitigate this we will add two-factor authentication for login. The website will be secured HTTPS and use a third-party SSL certificate. With this third-party SSL ticket, it will allow us to make the site public for industry access to the site.

Benefits Allows access from anywhere Single point of failure removed Instructor time reduced Most convenient to students Modular for future updates Brings system up to current standards More appealing site to industry

Risks Open to internet Takes most time to complete

Cost benefit analysisThis option will greatly reduce the cost to 677.66, as a subscription to HostGator is no longer

required. Most importantly instructor time is no longer needed to update the website. This option will require new hardware but SAIT has elected to use available hardware so there is no purchase cost.

Hosting at SAIT with VPN:

Equipment/Resources



Andrew Campbell $ - $85 1 $ 340 HP Proliant dl385 g7 (Using SAIT's Stock) $0.18 $ - 24 $ 315.36 SSL Certificate (Namecheap.com) $22.30 $ - 0 $ 22.30 Using SAIT's VPN / Creating custom one $ - $ - 0 $ - Total $ 677.66

8

Recommendation 3: Hosting at SAITThis recommendation suggests that the current system is replaced with a website that will allow

the student to upload their Capstone projects themselves. By replacing the current system, it removes the instructor from being a single point of failure. Unlike recommendation 2 this option will not allow for access outside of SAITs network. This cuts out a large amount of the work to be done, meaning the system could be up and running in a shorter amount of time.

Benefits Single point of failure removed Instructor time reduced

Risks Cannot be used when off SAITs network Less convenient for students/Instructors Industry will not be able to access the site unless they are on SAIT’s network

Cost benefit analysisThis option will greatly reduce the cost to 677.66, as a subscription to HostGator is no longer

required. Most importantly instructor time is no longer needed to update the website. This option will require new hardware but SAIT has elected to use available hardware so there is no purchase cost.

Hosting at SAIT:

Equipment/Resources



Andrew Campbell $ - $85 1 $ 340 HP Proliant dl385 g7 (Using SAIT's Stock) $0.18 $ - 24 $ 315.36 SSL Certificate (Namecheap.com) $22.30 $ - 0 $ 22.30 Total $ 677.66

9

Final RecommendationAfter our analysis of all options we have determined that the best option is recommendation #2.

The annual operating cost for this solution is reduced from 2,875.36 to 677.66, for an annual savings of 2,197.70. However, the main reason for this choice is that it has the VPN feature which allows access even when off the campus network. We believe that this feature is essential in allowing students to have the freedom to access the website off campus. This allows for a much more convenient experience. Although this option has the most potential security threats, we will add features that will mitigate this such as two factor authentication and encryption. Ultimately, we believe that if we are going to invest the time and money into remaking the current system, we should choose the option that will give the best experience to the end user. We also want to have all the necessary functionally from the start, making the system modular for future reworks.

Benefits that can be expected:

Access to the webpage outside of SAITs network for student efficiency. Easy access for industry eyes First party management and hosting of webpage. Single point of failure removed Instructor time reduced Modular for future updates Brings system up to current standards

Ultimately, we have decided that this solution is best suited for our ideal webpage configuration, our goal is to create a modern and efficient experience that is appealing to both industry and students which we find recommendation #2 best explores.

10

ScopeOur project is to overhaul the current capstone website, allowing students to upload their micro

sites as well as quick updates on their own page, which will include a text post with a picture if the user chooses. Our project also aims to take some of the upkeep and setup time off of teachers and push it more towards automation and students. The Security aspect of the project will be an SSL or TLS certificate, VPN access, OS hardening, Authentication through the website and VPN as well as two factor authentication through the website, A Firewall will also be put in place. Networking will be setting up port forwarding for the read only site, basic router and cabling is a part of this, as well as setting up the VPN. Software we will be writing our own websites in HTML/CSS/PHP/JS, as well as writing a script for 2 factor authentications of the user signing into the edit site also the creation of users in an AD env through the register admin page. Our server services will be Active Directory, DNS, RADIUS, FTP and WAMP. Hardware will be setting up the server with an ample amount of RAM and checking to see if we have enough cores, this will also include setup of equipment such as the UPS, monitor, and storage for the server. A Hardware RAID 1 and RAID 10 will be setup as well, the RAID 1 will be for the host OS and the RAID 10 will be dedicated to the Web Server.

Echo Team will deliver to the client the following items upon completion of the project:

1 HP ProLiant DL358 G8 Server with 16GB of RAM, 1 RAID 1 array of 146GB, 1 RAID 10 array 146GB, and 12 CPU cores, running Windows Server 2016 with the following functions enabled:

- VMWare Workstation 15 installed- OS hardened

3 VM’s running the DC, Web Server, and Firewall for those VM’s:

- DC: Windows Server 2016- DC: AD,DNS and RADIUS installed- DC: OS hardened- DC: AD test accounts created- Web Server: Windows Server 2016, WAMP Server and FTP installed- Web Server: WAMP Configured to run with Self Signed SSL Certificate- Web Server: phpadmin with a database for teams and their posts.- Web Server: Utilizing the RAID 10 array for database and storing files.- Firewall: A VPN that will allow students to access outside the network to gain access to the edit

site and verified by their AD credentials created on the DC.- Firewall: Rules to harden the security of accessing the VM’s inside the network.

1 Python script for the emailing of a random string for two factor authentication while signing into the edit website. This two factor script will need the smtp port open when demoing this script, which we will assume will be open for use during our demonstration in the cathedral.

The subsequent code that will make up the backend php and front end html/css for running the display, edit, authentication and login access of the sites. All code not written by a member of the team will be referenced and linked in the comments of the code.

11

1 Configured VPN through pfsense router using OpenVPN and RADIUS for authenticating users. This will allow users outside the network to gain access to the edit site as it will not be publicly advertised.

1 Testing spec excel sheet which has all of the tests that were run on the project during it’s development.

1 Security Document detailing what steps were taken to harden each OS and which ports features need to be open to ensure operation.

1 Final Report detailing the what went into the project, how it functions, cost break down, user manual etc.

Cost of Project:

Equipment/Resources


Labor Cost - per Hour

Time hr Total Project Setup

HP Proliant dl385 g7 (Using SAIT's Stock) (Power calculation)

$0.18 $ -

24 $ 84.67

SSL Certificate [1] $22.30 $ -

0 $ 22.30

Using SAIT's VPN / Creating custom one

$ -

$ -

0 $ -

Labor Cost (3 Students)

$ 60.00

84 $ 15,120.00

Total $ 15,226.97

Cost of project after completion:

Equipment/Resources



Andrew Campbell $ - $85 1 $ 340 HP Proliant dl385 g7 (Using SAIT's Stock) $0.18 $ - 24 $ 315.36 SSL Certificate [1] $22.30 $ - 0 $ 22.30 Using SAIT's VPN / Creating custom one $ - $ - 0 $ - Total $ 677.66

There does consist a small number of contents in which will not be included in the final product based on what we decided defines an accessible and secure website such as:

Editing of existing content: content is either uploaded or deleted with no in-between.

12

Industry site editing: people not associated with the program have no need for editing therefore justifying why for non-specific viewers only need read only access.

MethodologyThe flowchart below illustrates how a Public user accesses the Read-Only site and Private user accesses the edit site.

13

14

Assumptions + ConstraintsWe are operating under the assumption that there is enough power in the location that we are

installing the server as well as a suitable connection to SAIT’s network. We also assume that SAIT will be capable of providing us with the required hardware for the project to the specifications of the students. Lastly SAITs network can handle the traffic our site may incur and will be available to both us as well as users of our service when needed.

A constraint we face is the amount of time we have to meet scope. To combat this, we have scheduled buffer time in case of an unforeseen problem moving forward into the project. If we follow our project gantt and perform to our fullest we should not touch the buffer time we have imposed. If this fails and we run out of time Project functionality will have to be sacrificed.

Functional requirementsWBS

Task Number Task Name1 Capstone Project1.1 Acquire Server1.1.1 Set up iLO1.1.2 M: Final ilo setup1.2 Downloading OS and Configuration1.2.1 Set Up Basic Switching and Routing1.2.2 Static IP for all machines1.2.3 Rename each machine1.2.4 Update all machines1.2.5 Setting up DC VM1.2.5.1 Add DNS role1.2.5.2 Add AD role1.2.5.3 M: Final DNS and AD roles installed1.2.6 Setting up a Hosting Server VM1.2.6.1 Add to Domain1.2.6.2 Add Apache1.2.6.3 M: Basic Hosting Server VM setup1.2.7 Acquiring SSL Certificate1.2.7.1 Create a Dummy website1.2.7.2 Configure Apache to use SSL cert1.2.7.3 M: Obtained SSL cert and HTTPS Configured

for dummy site1.2.8 M: Installed OS' on both Hosting VM and DC

VM1.3 Setting up AD1.3.1 Setting up OU1.3.1.1 Adding Test Users to database1.3.2 Policy for the user to change password before

15

first login1.3.3 2 factor Authentication script 1.4 Member server configuration1.4.1 RAID 10 array for data storage1.4.2 Set Up Databases1.4.3 Fill in the database parameter1.4.4 Paring Database with dummy site for testing

login1.4.5 M: Functioning database with test login page1.4.6 Create upload/file storage parameters 1.4.6.1 Gather information on common filetypes 1.4.6.2 Create a reasonable filetype range 1.4.6.3 Create a filetype filtering script 1.5 Web Page Configuration1.5.1 Set up file structure in WampServer 1.5.2 Design whole UI for editing page (Locally at

SAIT) and public page (Read-only) using photoshop

1.5.3 Gather image and other resources for websites such as logos favicons.

1.5.4 Make mobile accessible UI design (tablet and phone width)

1.5.5 Start front end html of both sites (layout, divs, structure, mostly visual functionality and responsive)

1.5.6 Add php includes1.5.7 Create CSS style sheet 1.5.8 M: Final Front End Site Config1.6 Backend Configuration for editing site 1.6.1 Configure login page to use accounts 1.6.2 Configure two factor authentications 1.6.3 Link each class group page to database 1.6.4 Make files accessible to view and upload on

site 1.6.5 Make exclusive options for page access for

administrators/instructors 1.6.6 M: Final User Login interface/user experience

for editing site1.7 Backend Configuration for Read-only public

site1.7.1 Make files readable on page1.7.2 Make files update so files between the edit

site and read-only are the same 1.7.3 Find domain name that is not used1.7.4 Port forwarding to make the read only site

public

16

1.7.5 M: Final Read-Only site configured and published

1.8 Security Setup1.8.1 OS Hardening for all VMs1.8.1.1 Firewalls Rules1.8.1.2 Remove unnecessary services and

applications 1.8.1.3 Configure Group Policies1.8.1.4 Lock Down Ports1.8.1.5 M: Final Hardened OS1.9 VPN Configuration 1.9.1 Create VPN with either OpenVPN, IPsec, or

other service not previously discussed 1.9.2 Add and lock down firewall rules for VPN 1.9.3 Configure NAT rules where needed 1.9.4 Configure AD to be used for user

authentication 1.9.5 M: Final Functioning VPN to access Editing Site1.10 Written1.10.1 Logs/Journals1.10.2 Testing1.10.3 M: Final testing and build logs1.11 Presentation1.11.1 Final Testing1.11.2 PowerPoint and Visual Media Setup1.11.3 Demonstration Setup1.11.4 Testing parameters for demonstration 1.11.5 Division of presentation1.11.6 Presentation research1.11.7 M: Final Presentation

Budget/Asset ListEquipment/Resources Retail Cost of ProductHP Proliant DL385 G7 [2] $ 1,199.00 SSL Certificate [1] $ 22.30 Network Switch (SG11016NA) [3] $ 162.00 Network Router (ISR4221/K9) [4] $ 995.00

Student Labor Cost (For 14 weeks of work at 6 hours of work per week)

Time hr Cost per hr TotalLabor Cost (3 Students) 84 $

60.00 $ 15,120.00

17

Components

HardwareFlowchart

Budget/Asset ListEquipment/Resources Retail Cost of ProductHP Proliant DL385 G7 [2] $ 1,199.00 Network Switch (SG11016NA) [3] $ 162.00 Network Router (ISR4221/K9) [4] $ 995.00

18

WBS1.1 Acquire Server1.1.1 Set up iLO1.1.2 M: Final ilo setup1.2 Downloading OS and Configuration1.2.1 Set Up Basic Switching and Routing1.2.2 Static IP for all machines1.2.3 Rename each machine1.2.4 Update all machines1.4.1 RAID 10 array for data storage

SoftwareFlowchart

Budget/Asset ListEquipment/Resources Retail Cost of ProductMySQL $ - HTML $ - PHP $ - CSS $ - Python $ -

19

WBS1.4 Member server configuration1.4.1 RAID 10 array for data storage1.4.2 Set Up Databases1.4.3 Fill in the database parameter1.4.4 Paring Database with dummy site for testing

login1.4.5 M: Functioning database with test login page1.4.6 Create upload/file storage parameters 1.4.6.1 Gather information on common filetypes 1.4.6.2 Create a reasonable filetype range 1.4.6.3 Create a filetype filtering script 1.5 Web Page Configuration1.5.1 Set up file structure in WampServer 1.5.2 Design whole UI for editing page (Locally at

SAIT) and public page (Read-only) using photoshop

1.5.3 Gather image and other resources for websites such as logos favicons.

1.5.4 Make mobile accessible UI design (tablet and phone width)

1.5.5 Start front end html of both sites (layout, divs, structure, mostly visual functionality and responsive)

1.5.6 Add php includes1.5.7 Create CSS style sheet 1.5.8 M: Final Front End Site Config1.6 Backend Configuration for editing site 1.6.1 Configure login page to use accounts 1.6.2 Configure two factor authentications 1.6.3 Link each class group page to database 1.6.4 Make files accessible to view and upload on

site 1.6.5 Make exclusive options for page access for

administrators/instructors 1.6.6 M: Final User Login interface/user experience

for editing site1.7 Backend Configuration for Read-only public

site1.7.1 Make files readable on page1.7.2 Make files update so files between the edit

site and read-only are the same 1.7.3 Find domain name that is not used1.7.4 Port forwarding to make the read only site

public 1.7.5 M: Final Read-Only site configured and

20

published

NetworkingFlowchart

21

Budget/Asset ListEquipment/Resources Retail Cost of ProductCat-6 Ethernet Cables $ - OpenVPN $ -

WBS1.9 VPN Configuration 1.9.1 Create VPN with either OpenVPN, IPsec, or

other service not previously discussed 1.9.2 Add and lock down firewall rules for VPN 1.9.3 Configure NAT rules where needed 1.9.4 Configure AD to be used for user

authentication 1.9.5 M: Final Functioning VPN to access Editing

Site

SecurityFlowchart

22

Budget/Asset ListEquipment/Resources Retail Cost of ProductOpenVPN $ - SSL Certificate [1] $ 22.30

WBS1.2.7 Acquiring SSL Certificate1.2.7.1 Create a Dummy website1.2.7.2 Configure Apache to use SSL cert1.2.7.3 M: Obtained SSL cert and HTTPS Configured

for dummy site1.2.8 M: Installed OS' on both Hosting VM and DC

VM1.8 Security Setup1.8.1 OS Hardening for all VMs1.8.1.1 Firewalls Rules1.8.1.2 Remove unnecessary services and

applications 1.8.1.3 Configure Group Policies1.8.1.4 Lock Down Ports1.8.1.5 M: Final Hardened OS

Server ServicesFlowchart

23

Budget/Asset ListEquipment/Resources Retail Cost of ProductActive Directory $ - DNS $ - WAMP $ -

WBS1.2.5 Setting up DC VM1.2.5.1 Add DNS role1.2.5.2 Add AD role1.2.5.3 M: Final DNS and AD roles installed1.2.6 Setting up a Hosting Server VM1.2.6.1 Add to Domain1.2.6.2 Add Apache1.2.6.3 M: Basic Hosting Server VM setup

24

Gantt chartID Task

Mode% Complete

WBS Task Name Duration Start Finish

1 0%1 Capstone Project 59 days Fri 1/10/20 Thu 4/2/202 0%1.1 Aquire Server 1 day Fri 1/10/20 Mon 1/13/203 0% 1.1.1 Set up iLO 1 day Fri 1/10/20 Fri 1/10/204 0% 1.1.2 M: Final ilo

setup0 days Mon

1/13/20Mon 1/13/20

5 0%1.2 Downloading OSand Configuration

7 days Fri 1/10/20 Mon 1/20/20

6 0% 1.2.1 Set Up Basic Swithing and Routing

1 day Fri 1/10/20 Fri 1/10/20

7 0% 1.2.2 Static IP for all machines

1 day Mon 1/13/20

Mon 1/13/20

8 0% 1.2.3 Rename each machine

1 day Mon 1/13/20

Mon 1/13/20

9 0% 1.2.4 Update all machines

1 day Mon 1/13/20

Mon 1/13/20

10 0%1.2.5 Setting up DC VM1 day Tue 1/14/20Wed 1/15/2011 0% 1.2.5.1 Add DNS role1 day Tue 1/14/20Tue 1/14/2012 0% 1.2.5.2 Add AD role1 day Tue 1/14/20Tue 1/14/2013 0% 1.2.5.3 M: Final

DNS and AD roles installed

0 days Wed 1/15/20

Wed 1/15/20

1/13

1/15

7 12 17 22 27 1 6 11 16 21 26 2 7 12 17 22 27 1 6January 2020 February 2020 March 2020 April 2020

ID TaskMode

% Complete


13 0% 1.2.5.3 M: Final DNS and AD roles installed

0 days Wed 1/15/20

Wed 1/15/20

14 0%1.2.6 Setting up a Hosting Server VM

1 day Wed 1/15/20

Thu 1/16/20

15 0% 1.2.6.1 Add to Domain1 day Wed 1/15/20Wed 1/15/2016 0% 1.2.6.2 Add Apache1 day Wed 1/15/20Wed 1/15/2017 0% 1.2.6.3 M: Basic

Hosting Server VM setup

0 days Thu 1/16/20

Thu 1/16/20

18 0%1.2.7 Aquiring SSL Certificate

7 days Fri 1/10/20 Mon 1/20/20

19 0% 1.2.7.1 Create a Dummy website

1 day Fri 1/10/20 Fri 1/10/20

20 0% 1.2.7.2 Configure Apache to use SSL cert

3 days Thu 1/16/20

Mon 1/20/20

21 0% 1.2.7.3 M: Obtained SSL cert and HTTPS Configured for dummy site

0 days Mon 1/20/20

Mon 1/20/20

1/15

1/16

1/20


25

ID TaskMode

% Complete


22 0% 1.2.8 M: Installed OS' on both Hosting VM and DC VM

0 days Mon 1/20/20

Mon 1/20/20

23 0%1.3 Setting up AD 3 days Wed 1/15/20Fri 1/17/2024 0%1.3.1 Setting up OU 1 day Wed 1/15/20Wed 1/15/2025 0% 1.3.1.1 Adding

Test Users to database

1 day Wed 1/15/20

Wed 1/15/20

26 0% 1.3.2 Policy for the user to change password before first login

1 day Thu 1/16/20

Thu 1/16/20

27 0% 1.3.3 2 factor Authenticationscript

2 days Thu 1/16/20

Fri 1/17/20

28 0%1.4 Member server configuration

8 days Fri 1/10/20 Wed 1/22/20

29 0% 1.4.1 RAID 10 array for data storage

1 day Thu 1/16/20

Thu 1/16/20

30 0% 1.4.2 Set Up Databases

1 day Fri 1/17/20 Fri 1/17/20

31 0% 1.4.3 Fill in the database parameter

1 day Mon 1/20/20

Mon 1/20/20

1/207 12 17 22 27 1 6 11 16 21 26 2 7 12 17 22 27 1 6

January 2020 February 2020 March 2020 April 2020

ID TaskMode

% Complete


31 0% 1.4.3 Fill in the database parameter

1 day Mon 1/20/20

Mon 1/20/20

32 0% 1.4.4 Paring Database with dummy site for testing login

1 day Tue 1/21/20

Tue 1/21/20

33 0% 1.4.5 M: Functioning database withtest login

0 days Wed 1/22/20

Wed 1/22/20

34 0%1.4.6 Create upload/file storage parameters

3 days Fri 1/10/20 Tue 1/14/20

35 0% 1.4.6.1 Gather informationon common filetypes

1 day Fri 1/10/20 Fri 1/10/20

36 0% 1.4.6.2 Create a reasonable filetype range

1 day Mon 1/13/20

Mon 1/13/20

37 0% 1.4.6.3 Create a filetype filtering script

1 day Tue 1/14/20

Tue 1/14/20

1/22


26

ID TaskMode

% Complete


37 0% 1.4.6.3 Create a filetype filtering script

1 day Tue 1/14/20

Tue 1/14/20

38 0%1.5 Web Page Configuration

12 days Thu 1/16/20

Mon 2/3/20

39 0% 1.5.1 Set up file structure in WampServer

1 day Thu 1/16/20

Thu 1/16/20

40 0% 1.5.2 Design whole UI for editing page (Locally at SAIT) and public page (Read-only) using photoshop

2 days Mon 1/20/20

Tue 1/21/20

41 0% 1.5.3 Gather image and other resources for websites suchas logos favicons.

1 day Wed 1/22/20

Wed 1/22/20

42 0% 1.5.4 Make mobile accessible UI design (tabletand phone width)

1 day Wed 1/22/20

Wed 1/22/20


ID TaskMode

% Complete


43 0% 1.5.5 Start front end html of both sites (layout, divs, structure, mostly visual functionality and responsive)

7 days Thu 1/23/20

Fri 1/31/20

44 0% 1.5.6 Add php includes

7 days Thu 1/23/20

Fri 1/31/20

45 0% 1.5.7 Create CSS style sheet

7 days Thu 1/23/20

Fri 1/31/20

46 0% 1.5.8 M: Final FrontEnd Site Config

0 days Mon 2/3/20 Mon 2/3/20

47 0%1.6 Backend Configuration for editing site

12 days Mon 2/3/20Wed 2/19/20

48 0% 1.6.1 Configure login page to use accounts

3 days Mon 2/3/20 Wed 2/5/20

49 0% 1.6.2 Configure two factor authentications

4 days Thu 2/6/20 Tue 2/11/20

2/3


27

ID TaskMode

% Complete


49 0% 1.6.2 Configure two factor authentications

4 days Thu 2/6/20 Tue 2/11/20

50 0% 1.6.3 Link each class group page to database

5 days Mon 2/3/20 Fri 2/7/20

51 0% 1.6.4 Make files accessible to view and upload on site

8 days Fri 2/7/20 Tue 2/18/20

52 0% 1.6.5 Make exclusive options for page access for

2 days Mon 2/17/20

Tue 2/18/20

53 0% 1.6.6 M: Final User Login interface/userexperience for editing site

0 days Wed 2/19/20

Wed 2/19/20

54 0%1.7 Backend Configuration for Read-only public site

12 days Wed 2/19/20

Thu 3/5/20

2/19


ID TaskMode

% Complete


55 0% 1.7.1 Make files readable on page

3 days Wed 2/19/20

Fri 2/21/20

56 0% 1.7.2 Make files update so files betweenthe edit site and read-onlyare the same

6 days Mon 2/24/20

Mon 3/2/20

57 0% 1.7.3 Find domain name that is not used

4 days Mon 2/24/20

Thu 2/27/20

58 0% 1.7.4 Port forwarding to make the read only site public

3 days Tue 3/3/20 Thu 3/5/20

59 0% 1.7.5 M: Final Read-Only site configured and

0 days Thu 3/5/20 Thu 3/5/20

60 0%1.8 Security Setup 2 days Thu 1/16/20Mon 1/20/2061 0%1.8.1 OS Hardening

for all VMs2 days Thu

1/16/20Mon 1/20/20

3/5


28

ID TaskMode

% Complete


61 0%1.8.1 OS Hardening for all VMs

2 days Thu 1/16/20

Mon 1/20/20

62 0% 1.8.1.1 Firewalls Rules

2 days Thu 1/16/20

Fri 1/17/20

63 0% 1.8.1.2 Remove unnecessaryservices and applications

2 days Thu 1/16/20

Fri 1/17/20

64 0% 1.8.1.3 Configure Group Policies

2 days Thu 1/16/20

Fri 1/17/20

65 0% 1.8.1.4 Lock Down Ports

2 days Thu 1/16/20

Fri 1/17/20

66 0% 1.8.1.5 M: Final Hardened OS

0 days Mon 1/20/20

Mon 1/20/20

67 0%1.9 VPN Configuration

10 days Fri 3/6/20 Thu 3/19/20

68 0% 1.9.1 Create VPN with either OpenVPN, IPsec, or other service not previously

6 days Fri 3/6/20 Fri 3/13/20

1/20


ID TaskMode

% Complete


70 0% 1.9.3 Configure NAT rules where needed

1 day Mon 3/16/20

Mon 3/16/20

71 0% 1.9.4 Configure AD to be used foruser authentication

4 days Mon 3/16/20

Thu 3/19/20

72 0% 1.9.5 M: Final Functioning VPN to accessEditing Site

0 days Thu 3/19/20

Thu 3/19/20

73 0%1.10 Written 50 days Fri 1/10/20 Fri 3/20/2074 0% 1.10.1 Logs/Journals 50 days Fri 1/10/20 Thu 3/19/2075 0% 1.10.2 Testing 50 days Fri 1/10/20 Thu 3/19/2076 0% 1.10.3 M: Final

testing and build logs

0 days Fri 3/20/20 Fri 3/20/20

77 0%1.11 Presentation 8 days Mon 3/23/20Thu 4/2/2078 0% 1.11.1 Final Testing 1 day Mon 3/23/20Mon 3/23/2079 0% 1.11.2 PowerPoint

and Visual Media Setup

2 days Tue 3/24/20

Wed 3/25/20

80 0% 1.11.3 DemonstrationSetup

1 day Thu 3/26/20

Thu 3/26/20

3/19

3/20


29

ID TaskMode

% Complete


76 0% 1.10.3 M: Final testing and build logs

0 days Fri 3/20/20 Fri 3/20/20

77 0%1.11 Presentation 8 days Mon 3/23/20Thu 4/2/2078 0% 1.11.1 Final Testing 1 day Mon 3/23/20Mon 3/23/2079 0% 1.11.2 PowerPoint

and Visual Media Setup

2 days Tue 3/24/20

Wed 3/25/20

80 0% 1.11.3 DemonstrationSetup

1 day Thu 3/26/20

Thu 3/26/20

81 0% 1.11.4 Testing parameters for demonstration

1 day Fri 3/27/20 Fri 3/27/20

82 0% 1.11.5 Division of presentation

2 days Mon 3/30/20

Tue 3/31/20

83 0% 1.11.6 Presentation research

5 days Mon 3/23/20

Fri 3/27/20

84 0% 1.11.7 M: Final Presentation

0 days Thu 4/2/20 Thu 4/2/20

3/20

4/2


30

Glossary

FTP (File Transfer Protocol): The File Transfer Protocol is a standard network protocol used to transfer computer files between a server and client on a computer network. [5]

Single Point of Failure: A single point of failure is a part of a system that presents high risk as if it fails it will stop the entire system from working. [6] VPN (Virtual Private Network): A virtual private network extends a private network across a public network and allows users to send and receive data across shared or public networks similarly as if they were connected directly to that network. [7]

SSL (Secure Socket Layer): A public key certificate, also known as a digital certificate or identity certificate, is a document used to prove the owner of a public key. [8] I.T: (Information Technology): Department that handles all technological issues and developments. ROI: (Return on Investment): Ratio between net profit and cost of investment.

Web Hosting Service: A web hosting service is a form of Internet hosting service that allows users to make their website accessible to the public. [9] Automate: Remove the manual input required to complete a task.

Third party: Anything or anyone who is not indirectly involved

Redundancy: Having more than one recourse to perform a function (backup)

HostGator: HostGator is a Houston-based provider of shared, reseller, virtual private server, and dedicated web hosting. [10]

Modular: When system components can be separated or recombined.

31

References

[1]

NameCheap, "Security SSL Certificates," NameCheap, 29 11 2019. [Online]. Available: https://www.namecheap.com/security/ssl-certificates/. [Accessed 29 11 2019].

[2]

A. Systems, "HP ProLiant DL385 G7," Aventis Systems, 29 11 2019. [Online]. Available: https://www.aventissystems.com/HP-ProLiant-DL385-G7-s/4327.htm. [Accessed 29 11 2019].

[3]

Amazon, "SYSTEMS 16 Port Gigabit Switch," Amazon, 29 11 2019. [Online]. Available: https://www.amazon.ca/SYSTEMS-16-Port-Gigabit-Switch-SG11016NA/dp/B00V8IZ4GI. [Accessed 29 11 2019].

[4]

Ityuda, "Isr4221k9 Cisco Isr 4221 Router," Ityuda, 29 11 2019. [Online]. Available: https://ityuda.com/products/isr4221k9-cisco-isr-4221-router?variant=26167717298221&currency=CAD&utm_medium=ppc&utm_campaign=Shopping+Campaign&utm_source=adwords&utm_term=&hsa_acc=7001981867&hsa_ver=3&hsa_mt=&hsa_grp=9228058900&hsa_ad=39126337300&hsa_net=a. [Accessed 29 11 2019].

[5]

Wikipedia, "File Transfer Protocol," Wikipedia, 29 11 2019. [Online]. Available: https://en.wikipedia.org/wiki/File_Transfer_Protocol. [Accessed 28 11 2019].

[6]

Wikipedia, "Single point of failure," Wikipedia, 29 11 2019. [Online]. Available: https://en.wikipedia.org/wiki/Single_point_of_failure. [Accessed 28 11 2019].

[7]

Wikipedia, "Virtual private network," Wikipedia, 29 11 2019. [Online]. Available: https://en.wikipedia.org/wiki/Virtual_private_network. [Accessed 28 11 2019].

[8]

Wikipedia, "Public key certificate," Wikipedia, 29 11 2019. [Online]. Available: https://en.wikipedia.org/wiki/Public_key_certificate. [Accessed 28 11 2019].

[9]

Wikipedia, "Web hosting service," Wikipedia, 29 11 2019. [Online]. Available: https://en.wikipedia.org/wiki/Web_hosting_service. [Accessed 28 11 2019].

[10]

Wikipedia, "HostGator," Wikipedia, 29 11 2019. [Online]. Available: https://en.wikipedia.org/wiki/HostGator . [Accessed 28 11 2019].

32

User manual

SAIT’s Capstone Website allows for students to easily upload their project information through their own personal accounts. The student’s project information can then be viewed by anyone accessing the site.

Read Only site:

This being the public site can be accessed through the websites link without the need for a VPN connection.

User/Instructor site:

The user manual is divided based two sections, one for each site. The first being the student/instructor site with the second being the industry read only site. If trying to access from outside of the campus network there is a twostep procedure for accessing the site, first being the need to connect to the provided VPN to go to the link then logging in with provided credentials. If on the campus network all that is needed is to search the sites link and login the provided credentials. Once you have successfully logged onto the site you will be faced with a page that will have all your old uploads listed at the bottom of the page. To view older posts scroll down. At the top of the page there is a button that says Upload and another that says Delete. Once the user is logged in all that is needed for uploading will be to select the upload button and browse their file system to find the specific file, they need to upload, as long as the file complies with the file type standards set then the process is complete. Similarly, to uploading the deletion process will have a button to perform this task with the user only being able to select what they have uploaded.

33

How to get into your account:

First go to the capstone website at: <Address here>.

Once you have arrived at the home page you will see “login” in the upper right-hand corner.

Select this option and you will be brought to a page that prompts you with a username and password. Your teacher will have provided you with the credentials for this page. If you have issues with logging onto your account, please inform your instructor.

Once your credentials have been accepted you will be prompted for your security key. This will have been emailed to your edu.sait account. If it does not appear within a minute try again, if this problem persists then please inform an instructor.

Upload:

If the upload button is selected a text box will appear that allows the user to enter the text for their post. On the top of the box is a field labeled “title”. The text input into here will appear as a large title above the post. On the bottom left is an image icon. Once selected file explorer will open allowing the user to select an image that can go with the post (Images go beneath the text post when viewed). To the left of the image icon is the submit button, once submitted the post will be placed at the top of the previous posts.

Delete:

To delete a post, select “Delete”. You will then be prompted with your previous posts. Select the one you wish to remove.

34

Project administrationTeam ContractTeam Schedule

Sunday Monday Tuesday Wednesday Thursday Friday SaturdayANYTIME ANYTIME ANYTIME ANYTIME ANYTIME ANYTIME ANYTIMEExceptions

- Excused if there is a problem with transit ie. bus or lrt. (This does not excuse you ifyou do not communicate that you are going to be late)

- Deathly ill. Not able to function in front of a computer or pay attention. (Groupassessment)

- If you communicate clearly that you need more time or help on a certain portion ofthe project. However this does not include being constantly behind on the project(help or not).

Expectations- Work must be turned in on deadlines unless buffer time is given for that specific

Deadline- Work must match group quality standards. (Quality of work will be assessed by two

other group members)- Any sources used must be referenced in IEEE- Everyone must be open about their attendance to classes and meetings

Group communication- Primary form of communication will be over Google Hangouts and Discord.- Secondary form of communication will be over Email.- If a member is going to be late/absent from any meeting or class they must inform

other members of this.- If a member is going to be unable to finish a specific task they must inform other

members. It is unacceptable to hand in something unfinished just to get it in on time.- If a member is unable to perform a specific task they must inform other members of

this and ask for assistance when necessary.- Be open about priorities.- Lying about any portion of the project or work done on it is unacceptable.

35

PenaltiesSabotage:

- If a group member gets caught purposely sabotaging another group memberswork termination will be immediate. (This includes attempting to use thecontract maliciously against other members)

Plagiarism:- Any plagiarism will result in 10% from accused being distributed amongst the

other members- Any other offence will result in termination

Dishonesty:- First offence results in verbal warning and contract review- Second offence results in 6% from accused distributed amongst the other

members- Third offence results in termination

Unexcused Absences:- First offence not informing others of late or absence from meetings or classes

will result in verbal warning and review of contract.- 2 offences not informing others of late or absence from meetings or classes

will result in buying other group members lunch and review of contract.- 3 offences will result in 6% from accused distributed amongst group- 4 offences will result in termination.

Quality:- If the other members of the group determine that a members work does not fit

in with the expected standards a first strike will be given with a verbal warning- Second offence results in 6% from accused distributed amongst the other

members- Third offence will result in termination

Missed Deadline:- First offence will result in verbal warning and they must be expected to finish it- Second will result in 6% from accused being distributed to other groups- Third offence will result in termination

36

Project Sign Off

37

XKyle Molin

XJarrett Lynn

XEthan Fletcher

XAndrew Campbell

Documents

Capstone Site Overhaul · Web viewEcho Team Capstone Site Overhaul Functional Specification Kyle Molin | Jarrett Lynn | Ethan Fletcher