Essays on Web Application

After a system is designed, identification of various failure modes can assist a designer in evaluating the probability of element failure and recognize the links that are more essential for the security of the entire system. It is essential to eradicate or at least strengthen such single points of failure or in a system that involves high-assurance. Various solutions are available to address the perimeter defense of a network at the boundaries, but the highest threat to unauthorized access and information fraud remains with the internal network at the access level (Scott & Sharp, 2002). Access control is considered the ...

Source: InfoSec Institute Web article, January 2016

Summary: This article was about Information security governance and Risk Management in CISSP domain. In the article some basic guiding principles for the security are highlighted, the security's fundamental principles revolve around the CIA i.e. confidentiality, integrity and availability. Confidentiality confirms that the data is confidential through personal identifying information, integrity ensures the accuracy of the data and it is not modified by anyone else and finally availability ensures that whenever the data is needed, it is available i.e. no DOS attacks or any other attacks stops the access of the data. The risk management talks about the analysis ...

a. Discuss the risks associated with Penetration Testing and steps necessary to minimize the risk to both the tester and client. Penetration testing is used to discover any security risk present in an application or program. The risks of Penetration Testing are unknowingly gaining unauthorized access to an application which can harm a client’s security, and the tester may also be exposed to any kind of security glitch. It can also mean the loss of data or data being leaked out and in the case of a life-saving equipment; it may result in loss of life. The risks ...

Abstract

Web servers are the building blocks of this generation distributed systems and plays a major role in the enterprise application architectures. Due to the flexibility and openness that these Web server centric computing model offers, though makes this ubiquity possible, it also opens up corporate data and processes to security threats. This paper focuses on the security of the public Web servers. There are many different vulnerabilities such as exploits utilizing software bugs in the underlying operating system, denial of service, unauthorized access of confidential information, man-in-the middle attacks, subvert the Web server and use it as a bot ...

Background

As a fast-growing medical research and development company, nothing is more important to Information Assurance Research than the security of the company’s proprietary information and customer and employee data. I am concerned that the company’s sensitive information stored at Reston Virginia and the data conveyed via the WAN is not well protected from web-based application attackers. My proposal is based on research on various web-based applications security software in different online fora. I have also explored various studies on different security software and their effectiveness as well as affordability. My insight has also been drawn from customer ...