CS 305 Module Two Written Assignment Tolentino

docx

School

Southern New Hampshire University *

*We aren’t endorsed by this school

Course

305

Subject

Computer Science

Date

Feb 20, 2024

Type

docx

Pages

Uploaded by UltraCamelMaster345

CS 305 Module Two Written Assignment Template Instructions Replace the bracketed text with the relevant information in your own words. If you choose to include images or supporting materials, make certain to insert them in all the relevant locations in the document. 1. Areas of Security Input Authentication: While crafting our command input function, it's imperative that we main- tain stringent input validation protocols. By ensuring the security system validates all informa- tion, we can effectively thwart injection attacks. APIs: In cases where our command input function necessitates external accessibility, we might need to implement a RESTful API. To safeguard our systems from unwarranted access, the API's design should be focused on preventing unexpected incursions. Additionally, considering input validation at the API level is a wise practice. Cryptanalysis: When employing APIs, it is paramount to employ robust cryptography to safe- guard our data, as well as the sensitive information of our customers. Client/Server Interaction: During HTTP requests facilitated by API access to our function, data security must be a top priority. Code Oversight: Thorough code reviews are indispensable for both the API access layer and all command input functions. Data Encapsulation: Given that our command input function may access data stored within our system, it's crucial that we adhere to proper data access protocols. 2. Areas of Security Justification The areas of security identified allows programmers to prevent the majority of attacks by ensuring good data hygiene and implementing the best processes with regards to security considerations. Most attacks are due to exploitation in one of these security areas. 3. Code Review Summary In the POM.XML, the version for the webmvc is using the dated 2.6.5 version instead of the latest version as of 18 Aug 2023. 4. Mitigation Plan Update Sprint Data rest webmvc to latest version, which should be 4.1.3 CAO 18 Aug 2023. 1

Additionally, more input validation will be included in GreetingController’s parser to check for problematic string patterns, or perhaps using a library to accomplish this. Furthermore, we should limit string sizes/length in this .java file. 2

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

Related Documents

CS 305 Module Five Coding Assignment Checksum Verification - Tolentino.docx

Module 6 Pseudocode and Reflection.docx

Module 3-2 Reflection.docx

Module 3-2 Pseudocode.docx

CS 230 Project Software Design - Tolentino Project 2.docx

CS 305 Module Two Coding Assignment - Tolentino.docx

Module 4-2 Pseudocode.docx

CS319 Module 2 - Interview and Personas.docx

CS319 Module 5-3 Data Prioritization.docx

CS 305 Project Two Practices for Secure Software Report - Tolentino.pdf

Color, Sounds, and Motion.docx

Guided Practice - Network Security.docx

Recommended textbooks for you

Np Ms Office 365/Excel 2016 I Ntermed

Computer Science

ISBN:9781337508841

Author:Carey

Publisher:Cengage

New Perspectives on HTML5, CSS3, and JavaScript

Computer Science

ISBN:9781305503922

Author:Patrick M. Carey

Publisher:Cengage Learning

COMPREHENSIVE MICROSOFT OFFICE 365 EXCE

Computer Science

ISBN:9780357392676

Author:FREUND, Steven

Publisher:CENGAGE L

CMPTR

Computer Science

ISBN:9781337681872

Author:PINARD

Publisher:Cengage

Systems Architecture

Computer Science

ISBN:9781305080195

Author:Stephen D. Burd

Publisher:Cengage Learning

Programming with Microsoft Visual Basic 2017

Computer Science

ISBN:9781337102124

Author:Diane Zak

Publisher:Cengage Learning

SEE MORE TEXTBOOKS

Recommended textbooks for you

Np Ms Office 365/Excel 2016 I Ntermed
Computer Science
ISBN:9781337508841
Author:Carey
Publisher:Cengage
New Perspectives on HTML5, CSS3, and JavaScript
Computer Science
ISBN:9781305503922
Author:Patrick M. Carey
Publisher:Cengage Learning
COMPREHENSIVE MICROSOFT OFFICE 365 EXCE
Computer Science
ISBN:9780357392676
Author:FREUND, Steven
Publisher:CENGAGE L
CMPTR
Computer Science
ISBN:9781337681872
Author:PINARD
Publisher:Cengage
Systems Architecture
Computer Science
ISBN:9781305080195
Author:Stephen D. Burd
Publisher:Cengage Learning
Programming with Microsoft Visual Basic 2017
Computer Science
ISBN:9781337102124
Author:Diane Zak
Publisher:Cengage Learning