Homework 5 - Write the Security plan for the software that implements on-line auction system Guidelines: The security plan should outline the authentication and authorization, and privacy requirements for the software The known threats to the system should be described along with a plan for managing each threat.

Homework 5 - Write the Security plan for the software that implements on-line auction system Guidelines: The security plan should outline the authentication and authorization, and privacy requirements for the software The known threats to the system should be described along with a plan for managing each threat.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter8: Security Management Models

Section: Chapter Questions

Problem 15RQ

See similar textbooks

Similar questions

Let us consider an application where we need to run a secure Information Management System.We are to receive very confidential information from our customers and keep them save in our system. These information are sent to us in the softcopy forms. We are to protect our customers’ confidentiality even from ourselves, we are not to see the information they bring to us, or else the confidentiality is compromised.Your job as computer security officer is to verify the authenticity of the important document received in order to save them under the appropriate users. Mind you; you have no access to the users’ usernames and passwords, you can store but cannot retrieve except the user himself.Secondly, you are to protect the passwords and usernames to make impossible for everyone (including the system administrators) except the users themselves to access even if the whole database is hacked or stolen.2. Which cryptographic mechanisms would you implement in order to protect the usernames and…
Let us consider an application where we need to run a secure Information Management System.We are to receive very confidential information from our customers and keep them save in our system. These information are sent to us in the softcopy forms. We are to protect our customers’ confidentiality even from ourselves, we are not to see the information they bring to us, or else the confidentiality is compromised.Your job as computer security officer is to verify the authenticity of the important document received in order to save them under the appropriate users. Mind you; you have no access to the users’ usernames and passwords, you can store but cannot retrieve except the user himself.Secondly, you are to protect the passwords and usernames to make impossible for everyone (including the system administrators) except the users themselves to access even if the whole database is hacked or stolen.1. Based on your knowledge in computer security, which cryptographic mechanisms would you…
1. Let us consider an application where we need to run a secure Information Management System. We are to receive very confidential information from our customers and keep them save in our system. These information are sent to us in the softcopy forms. We are to protect our customers’ confidentiality even from ourselves, we are not to see the information they bring to us, or else the confidentiality is compromised. Your job as computer security officer is to verify the authenticity of the important document received in order to save them under the appropriate users. Mind you; you have no access to the users’ usernames and passwords, you can store but cannot retrieve except the user himself. Secondly, you are to protect the passwords and usernames to make impossible for everyone (including the system administrators) except the users themselves to access even if the whole database is hacked or stolen. i. Based on your knowledge in computer security, which cryptographic mechanisms would…
Let us consider an application where we need to run a secure Information Management System. Examiner: Veronica AgblewornuWe are to receive very confidential information from our customers and keep them safe in our system. This information is sent to us in the softcopy forms. We are to protect our customers’ confidentiality even from ourselves, we are not to see the information they bring to us, or else the confidentiality is compromised. Your job as a computer security officer is to verify the authenticity of the important document received in order to save them under the appropriate users. Mind you; you have no access to the users’ usernames and passwords, you can store but cannot retrieve except the user himself.Secondly, you are to protect the passwords and usernames to make it impossible for everyone (including the system administrators) except for the users themselves to access even if the whole database is hacked or stolen. 1. Based on your knowledge in computer security, which…
The concept of a strong password, as well as password administration, should be considered for the system you are designing.
Let us consider an application where we need to run a secure Information Management System. We are to receive very confidential information from our customer sand keep them save in our system. These information are sent to us in the softcopy forms. We are to protect ourcustomers’ confidentiality even from ourselves, we are not to see the information they bring to us,or else the confidentiality is compromised. Your job as computer security officer is to verify the authenticity of the important documentreceived in order to save them under the appropriate users. Mind you; you have no access to the users’ usernames and passwords, you can storebut cannot retrieve except the user himself. Secondly, you are to protect the passwords and usernames to make impossible for everyone(including the system administrators) except the users themselves to access even if the whole data base is hacked or stolen. i)Based on your knowledge in computer security, which cryptographic mechanisms would you…
Give us a term that you can use to describe "application security."
In this case, one of the four techniques of access control may be used. Which variables influence your decision-making process?
1. The risk level assigned for a threat with rare likelihood and major consequence rating is __________________. Low Medium Extreme High 2. Both dynamic binary rewriting and interposition techniques do not require recompilation of the application binary. True False 3. It is preferred that Hash algorithm used in password security must be optimized to execute as quickly as possible. True False
Consider how to handle passwords for the system you are designing, as well as the idea of strong passwords.
An operating system can implement a controlled security environment by controlling sharing through separating classes of subjects and objects. The separation can occur in several ways such as temporal, logical and network separation. Select one: True False
The term "application security" needs to be defined.