Envo 5

jpg

School

University of Michigan *

*We aren’t endorsed by this school

Course

208

Subject

Computer Science

Date

Feb 20, 2024

Type

jpg

Pages

1

Uploaded by DeaconMetalHummingbird51

Report
Overview: This week, you have studied Web application vulnerabilities, password complexity, logs and cryptographic algorithms. The Lab for this week demonstrates your knowledge of this additional knowledge applied using Python functionality. Submission requirements for this project include 2 files. (Zipping them into one file is acceptable and encouraged): e Python Web Application Code (Python code for all routes, templates, static files and other files) e Word or PDF file containing your test, pylint results and Cryptographic results. Python Applications for this lab: (total 100 points): 1. (50 points) In this exercise you will update your web site to include a password update form and provide additional validation on the password check. Specifically you should create: a. Password update Form - This Python form allows a previously registered user to reset their password after they have successfully logged in. b. Authentication functions These Python functions will check the following NIST SP 800-63B criteria are met upon password update: e Use the previous criteria for password length and complexity. (This work should already be done.) e Compare the prospective secrets against a list that contains values known to be commonly- used, expected, or compromised (Provided as CommonPasswords.txt). e Ifthe chosen secret is found in the list, the application SHALL advise the subscriber that they need to select a different secret. c. Logger - Create a log to log all failed login attempts. The Log should include date, time and IP address. 1. Start early. This will take you longer than you think. 2. Leverage the File I/O, Flask and Data structures work previously performed in the class. 3. Use functions to enhance code reuse and modularity. 4. Use Python Lists or other data structures to store the Common Passwords and then appropriate search functions to expedite comparisons. 5. Use comments to document your code 6. Test with many combinations. 7. Use pylint to verify the code style - the goal is a 10! 2. (30 points) Using the Decrypting Secret Messages sites found in this week’s readings, decrypt the following messages. B i A A AR e T At e iy T P RN RN
Discover more documents: Sign up today!
Unlock a world of knowledge! Explore tailored content for a richer learning experience. Here's what you'll get:
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help