Pearson eText for Software Engineering -- Instant Access (Pearson+)
10th Edition
ISBN: 9780137503148
Author: Ian Sommerville
Publisher: PEARSON+
expand_more
expand_more
format_list_bulleted
Expert Solution & Answer
Chapter 13, Problem 13.4E
Explanation of Solution
Threats to Mentcare System:
Mentcare system is used in many healthcare facilities and is designed for use in clinics attended by patients suffering from mental health problems and records details of their consultations and conditions.
Some of the threats to Mentcare systems are:
- Threat occurs at confidentiality of the system and its data: In the mentcare system, the confidentiality of the system and its data can disclose information to people or programs which are not authorized to have access of information.
- Threat: An unauthorized user gains access to system and makes the system unavailable.
- Control: One can control the above threat by only allowing system management from specific locations that are physically secure.
- Security: One must take care that diverse keys are available in events of emergency and key distribution must be taken care.
- Threat occurs at integrity of the system and its data: In the mentcare system, the system may damage or software and data may be corrupted programs by using these threats...
Expert Solution & Answer
Want to see the full answer?
Check out a sample textbook solution
Students have asked these similar questions
Describe the general security maintenance model's five domains.
Make software flow diagrams for IoT Device Vulnerability Analysis. Sample is given on the image. No handwritten answers.
Summarize in you own words why it is beneficial to create a vulnerability map for a planned software system. What are the risks when you do not consider the inherent system vulnerabilities in planning?
Chapter 13 Solutions
Pearson eText for Software Engineering -- Instant Access (Pearson+)
Knowledge Booster
Similar questions
- Approaches of categorizing access control mechanisms are discussed. Analyze the many types of controls that might be used in each scenario.arrow_forwardExplain the concept of Safety Integrity Levels and their significance in software safety. How are SILs determined, and what is their relationship with risk reduction?arrow_forwardWrite a scenario or situation that shows attacks that affected a system, then suggest Security Mechanisms Can be used to protect the victim from such attacks. write and explain this with give references?arrow_forward
- It is recommended to submit a proposal for a security education program. Artifacts that have been finished and polished are supposed to have every part they need. The input that was used to create it should be reflected in the final product. The proposal will include an executive summary, a communication plan, an introduction, rules and processes, suggested solutions to security flaws, and plans to continuously monitor the organization for hostile behaviour.arrow_forwardIn this discussion, we will look at four alternative logical security measures that, if implemented, would boost the amount of control that the system security administrator has access to. If these measures were implemented, the amount of control that the administrator has access to would increase.arrow_forwardIn the context of DevSecOps, how can security be seamlessly integrated into the software development pipeline to ensure continuous security testing and compliance?arrow_forward
- Software Assurance Maturity Model (SAMM) is an open framework to help organizations formulate and implement security policy for an organization. Answer the following questions regarding SAMM: How do organizations generally deploy SAMM Model? Is SAMM a descriptive model or prescriptive model? Write the rationale behind your answer.arrow_forwardIt is recommended to submit a proposal for a security education program. Artifacts that have been finished and polished are assumed to include all their vital parts. The input that was used to create it should be reflected in the final product. The proposal will comprise an executive summary, communication plan, proposal introduction, rules and processes, suggested solutions to security flaws, and methods to continuously monitor the organization for hostile behaviour.arrow_forwardAfter reading the case presented in the module, write a short response to the following discussion questions and ethical decision making scenario. Discussion Questions Before the discussion at the start of this chapter, how do Fred, Gladys, and Charlie each perceive the scope and scale of the new information security effort? Did Fred’s perception change after that? How should Fred measure success when he evaluates Gladys’ performance for this project? How should he evaluate Charlie’s performance? Which of the threats discussed in this chapter should receive Charlie’s attention early in his planning process?arrow_forward
- It is recommended to propose a security awareness campaign. Finished works of art should not be missing any important parts. All of the input should be reflected in the final product. Proposal contents will comprise an executive summary, communication plan, proposal introduction, rules and processes, suggested solutions to security flaws, and plans to continuously monitor the organization for hostile behaviour.arrow_forwardUsing concrete examples might help you make your point more clear. In order to be a part of the information security function, conventional personnel practises are merged with controls and integrated with information security concepts in this area.arrow_forwardIn the context of software safety, what are the key differences between deterministic and probabilistic risk assessment methods, and when is each one more appropriate?arrow_forward
arrow_back_ios
SEE MORE QUESTIONS
arrow_forward_ios
Recommended textbooks for you
Management Of Information SecurityComputer ScienceISBN:9781337405713Author:WHITMAN, Michael.Publisher:Cengage Learning,
Management Of Information Security
Computer Science
ISBN:9781337405713
Author:WHITMAN, Michael.
Publisher:Cengage Learning,