Model an attack by a remote user accessing the university network via the Internet. Explore attack vectors and attackers’ goals.
Consider different avenues of attack when creating the model. Web application attacks, phishing attacks, VPN attacks, and others should be considered. Discuss the goals of the attack, such as data theft, defacement, and so forth.

Model an attack by a student worker as an internal threat. Explore attack vectors and attackers’ goals.
Attack vectors could include stolen credentials, application hacking, etc. Goals may be changing grades, altering tuition payments, or finding personal information on other students or professors.
Create a defensive model to address both threats, including details of the countermeasures and how they stop each step of the attack model.