Internet : A Multi Disciplinary Perspective

Due to the time restraint and the increasing focus on vulnerabilities in your security structure, this document only covers four of the areas that will eventually have written security policies.

Abstract – Software Security is the need of the hour today, especially when we have so many of our day to day activities depending upon computers, internet and software’s. These technologies are of utmost importance even for the most basic activities like banking, trading, shopping, social media and communication, which uses different software tools to provide service to users all around the world. Migrating to this tech world has made it a necessity to provide a high quality of software with equally good security. Systems nowadays like a banking system deals with highly sensitive personal information, so providing software security is as much important as the development of the software. The course project required us to develop a secure banking system which helped us to learn about the various software security tools and the get knowledge regarding the current trends in the field, what can be the possible attack vectors , attack patterns and how to mitigate their effects and defend the system against various such factors.

Development - A risk assessment should be done and use the results as a baseline for security controls to review coding standard, libraries, and practices. Developers should be trained to identify coding vulnerabilities in this stage.

The use of information technology in business presents major security challenges, poses serious ethical question, and affects society in significant ways. Especially, the computer crime is a growing threat to society and is caused by the criminal or irresponsible actions of individuals who are taking advantage of the widespread use and vulnerability of computers and the Internet and other networks. It presents a major challenge to the integrity, safety, and survival of most business systems.

In the article “Privacy and Security Toward More Secure Software,” Dorothy Denning mentioned two proposals to diminish the number of flaws found in software security. The first proposal is for the U.S. government to control vulnerability market dilemma. The second is to hold software companies responsible for software faults. The present market forces do not put adequate pressure on software companies to provide security for their products. Denning stated that the National Institute Standards and Technology added 7,937 vulnerabilities to the National Vulnerability Database. Companies employ security researchers whose responsibilities include identification of security flaws in the software for purposes of strengthening software security.

Security in the age of internet has become a tremendously important issue to provide comfort not only for paranoid people but for many others who are naïve to believe that protection in digital era is essential to communication between millions of people that increasingly used as a tool for commerce.

Traditionally, IT (Information Technology) security focused on securing the IT assets within the organization’s IT framework. However, with the advent of smart mobile devices, cloud computing, and remote connectivity, the IT landscape has changed dramatically in the last few decades. With these changes, the frequency of attacks by cyber criminals has increased as well. We constantly hear news reports of large-scale cyber attacks targeting financial, government and healthcare organizations. Moreover, the type of attacks has evolved to become more sophisticated and untraceable, making it difficult for security analysts to keep up with the every changing technological demands of creating and maintaining an effective security. This has now led many security experts to believe that having an effective defense mechanism in place is a much viable option than to be reactive to threats. This also makes sense from a business perspective. Companies want their IT investments to further their business goals and not to be constrained too much by focusing heavily on IT security, which could potentially lead to an increase in operational costs to tackle security issues.

Because of tremendous information blasts experienced by gigantic endeavors in each industry, information security is the talk of the tech world. It has besides changed into a board-level subject. From a client's viewpoint, security improvement should ensure an attempt against anything that could physically impact it, for example, an enormous information break. It moreover ought to be anything but difficult to utilize, unnoticeable and not make a deterrent to efficiency or crucial exercises, for example, interfacing with partners, growing new applications or mechanizing new business outlines. From a client's point of view, security advancement should ensure an endeavor against anything that could

Governments, organizations and companies co-operate to secure cyber space. In fact, the prevention of cyber criminal activities is the most critical aspect in the fight against cyber crime. It’s mainly based on the concepts of awareness and information sharing. A proper security posture is the best defence against cyber crime (Paganini, Perluigi, 2014)

According to U.S National Vulnerability Database (NVD) number of discovered vulnerability in year 2015 is 6488 as per show in figure1. Compared with previous years. The result illustrated the number of vulnerability still is very high. Although there is a lot of security technologies in different layers. This led us to conclude that software security should be a major function in software development. In other words handling the real root cause of the observed threats correctly will save time, many and

Safety of information is the most valuable asset in any organization particular those who provide financial service to others. Threats can come from a variety of sources such as human threats, natural disasters and technical threats. By identifying the potential threats to the network, security measure can be taken to combat these threats, eliminate them or reduce the likelihood and impact if they should occur.

Almost all kind of large and small organizations might face increasing number of attacks into their network or intellectual property. This may lead to data disclosure, data destruction, and damage of organization’s reputation. There are numerous threats in the cyber space which might be capable of stealing, destroying or making use of out sensitive data for financial and non-financial gains. As the amount of computer, mobile and internet users increases, so does the number of exploiters.

Security is that the most significant and important issue for firms worldwide. Organizations want a secure and reliable infrastructure for his or her systems to mitigate the chance of malicious activity from each external and internal sources. Organizations worldwide have major security considerations specifically

As a consequence, an increasing number of users and organizations have expressed the need of more robust systems and applications. Hence, this fact implies incorporating an effective security stage into the development life cycle in order to be able to efficaciously assess security issues.

In today’s highly connected digital ecosystem, our lives, businesses, communications, and a lot of activities depend on the websites and web applications. All websites contain sensitive data and deliver business-critical information services to the targeted audience. Due to the rapidly increasing use of websites and web applications, vulnerabilities have become quite rampant. Even the smallest security loophole can give cybercriminals a chance to destroy the web-based business, damage customer confidence, and brand reputation in a short time span.