Corporate Cyber Security – IT 335

Activity 2 – Downloading software and checking its integrity before installation (20 pts)

Step 1: VirtualBox (10 points)

VirtualBox is one of the host-based virtualization software or hypervisors that can be used to create sand-boxes for installing and running applications.

1. To download VirtualBox, launch your favorite browser and go to the VirtualBox website (https://www.virtualbox.org/) and click the link for the download page

1. Download the latest VirtualBox binary for your operating system (i.e. windows, OS X, linux etc).
2. Compute the MD5 hash of the downloaded VirtualBox software using https://emn178.github.io/online-tools/md5_checksum…

1. Compare the computed MD5 hash from the online tool with the MD5 hash value published on the virtualbox download page and then answer the following questions.
   1. What is the MD5 hash of the downloaded software that is published on the virtual box download page? (1 point)
   2. What is the computed MD5 hash using the online tool in #4 above? (1 point)
   3. What assurance do you have that the VirtualBox software you downloaded is legitimate? (2 points)
   4. How can you tell that VirtualBox software is malicious? (hint: use has when you compare hashes? (2 points)
   5. How would you decrease the chance of inadvertently installing malicious software downloaded from websites? (2 point)
   6. If downloaded malicious software from website, you would contact the developer? Why or Why not? (1 point)
2. Install the VirtualBox software and when the installation finishes, take a screenshot. (1 point)

Step 2: Download Kali Linux and check its integrity (5 points)

Kali Linux is a Debian Linux operating system pre-installed and configured information security tools for penetration testing and vulnerability assessment.

1. Download the Kali Linux from https://www.kali.org/downloads/
2. Compute the MD5 hash of the downloaded Kali Linux software using https://emn178.github.io/online-tools/md5_checksum.html
3. Answer these questions
   1. What is the SHA256 hash of the downloaded Kali Linux software which is published on the download page? (1 point)
   2. What is the computed SHA256 hash using the online tool in #2 above? (1 point)
   3. What assurance do you have that the Kali Linux software you downloaded is legitimate? (3 points)

Step 3: Creating your Kali Linux Virtual Machine (VM) in VirtualBox (5 points)

1. Click New to create a new VM

1. Type a name for your VM and select the operating system ie Linux and then click Next

1. For memory size, use the default which is about 1GB (1024 MB)

1. Create a virtual hard disk for your VM (see below) and click the create button

1. Select the VM disk type, which is VirtualBox Disk Image since we are using a VirtualBox hypervisor and click next

1. For storage on disk type, select fixed size since we shall not be using the VM for any extensive data storage

1. For file size and file location, use the default 10 GB and click create

When you see the installation progress meter, then everything is going well in preparing the Linux image for installation!

1. After successfully completing the preparation, you will see you VM but we have to perform one more step to install the Ubuntu Linux OS to create the VM. Click the Settings Button in VirtualBox after selecting your VM (which is must be powered off)

1. Click storage button in the left pane for settings to browse and install the Linux image in the Virtual Box hypervisor

1. After clicking the storage button in the left pane. Click Host Drive under controller ID within the middle pane and the little disk icon next to optical drive in the right pane. Select Choose Virtual Optical Disk File …

1. Browse and select the Ubuntu Linux image that you downloaded and then click Open

1. You should now see the bootable image in the storage pane (see below). Click Ok to close the pane

1. Select the Linux VM and click start to install the Ubuntu Linux OS to create the VM. Select English and Click Install Ubuntu. Install any OS updates when prompted. The rest of the screens are straight forward. Just follow the instructions.
2. Launch Kali Linux and take a screenshot of the desktop (5 points).

file attached is more useful to follow