User Account

All Pages

What are at least two examples of business logic errors

Assignment Help Management Information Sys
Reference no: EM131680455

Using the readings from weeks 7 and 8 as a baseline, analyze, test and document the results for the tutoring web application found on the SDEV virtual machine. The latter will enable you to discover more information than a cursory manual examination. Specific tests to be conducted include:

1. Testing for Reflected Cross site scripting (OTG-INPVAL-001)

What is the importance of testing for this vulnerability?

How many occurrences of the vulnerability did an automated scan discover?

What is your recommendation to address any issues?

Can you place a simple JavaScript alert (e.g., DeleteSession.php as an example)?

2. Testing for Stored Cross site scripting (OTG-INPVAL-002)

What is the importance of testing for this vulnerability?

What happens when you attempt to add a pop-up window (e.g., <script>alert(document.cookie)</script>) to the email input field within the "index.html" field?

Can you introduce Stored Cross site scripting?

3. Testing for SQL Injection (OTG-INPVAL-005)

Did your manual and automated testing discover any SQL Injection vulnerabilities - if so, how many? (Note: There should be at least one occurrence).

Name two or more steps you can take according to the reading to resolve the issue.

Fix and test at least one occurrence of the vulnerabilities - displaying your resulting source code and output results.

4. Testing for Code Injection (OTG-INPVAL-012)

What is the importance of testing for this vulnerability?

What are at least two measures you can take to remediate this issue?

Can you input some simple html code or exploit Remote File Inclusion (RFI)?

5. Test business logic data validation (OTG-BUSLOGIC-001)

What are at least two examples of business logic errors? This could be from various input forms or areas you discovered in previous HW assignments.

How can you mitigate against such errors?

6. Test integrity checks (OTG-BUSLOGIC-003)

Do Drop down menus exist and are they sufficient for the application? Why does the use of drop-down menus help mitigate against this risk?

Does your manual or automated scan reveal the use of password "AUTOCOMPLETE"? What issue, if any, does the use of AUTOCOMPLETE pose?

7. Test defenses against application misuse (OTG-BUSLOGIC-007)

What is the importance of testing for this vulnerability?

Can adding additional characters in input fields cause unexpected results? Verify for at least two instances.

General Guidelines

You should document the results for the tests, your comments, and recommendations for improved security for each security control tested in a word or PDF document.

The format of your document should be the format that is recommended in chapter 5 of the OWASP testing guide. Provide screen captures and descriptions of your tests conducted. Discuss any issues found and possible mitigations.

Deliverables:

You should submit your document by the due date. Your document should be well-organized, use the OWASP recommended reporting format, include all references used and contain minimal spelling and grammar errors.

Reference no: EM131680455

Questions Cloud

Discuss threats that coral reefs are currently facing : Compare and analyze various ecosystems in terms of their living and nonliving components. Critically evaluate sources of information about environmental science
Nutrition plays in the prevention of the disease : Required paragraph topics include but are not limited to: the role nutrition plays in the prevention of the disease, etiology, progression, treatment
Find a recursive equation : There are n types of toys, which you are collecting one by one. Each time you buy a toy, it is randomly determined which type it has, with equal probabilities.
Write a statement in support to fitzhughs argument : The following is a statement from the social theorist George Fitzhugh. Write a statement in support to Fitzhugh's argument.
What are at least two examples of business logic errors : What are at least two measures you can take to remediate this issue? Can you input some simple html code or exploit Remote File Inclusion (RFI)?
Many elderly have dentition issues : Many elderly have dentition issues, what are some options for these patients to achieve their nutritional needs if they don't have all of their teeth
Explain how your friends commute affects : Explain how these impermeable surfaces affect at least one aspect of the hydrologic cycle - Explain how your friend's commute affects one or more nutrient
Describe the use of visual elements such as line and shape : Describe use of visual elements such as line, shape, color & space used in pieces. For example: In what way is it balanced? Is it asymmetrical or symmetrical?
What is the debt to assets ratio : The 2017 financial statements of Blossom Company contain the following selected data (in millions) - What is the debt to assets ratio

Reviews

Write a Review

Management Information Sys Questions & Answers

  Configure network utilities on linux

Configure Network Utilities on Linux and Windows environments - professional skills to manage and maintain network servers

  Research and prepare a report on mobile device attacks

Research and prepare a report on Mobile Device Attacks. Prepare a 6 page paper in Microsoft Word using approved APA format.

  Identify the use of it in various departments

Identify the use of IT in various departments. Identify the advantages of various IT tools used by the organization. Suggest better technology or technology that can increase the company's profitability and efficiency.

  Examine the proposed business ethical problem

Assess the levels of security deficiencies inherent in the Brazilian Federal Data Processing Service original enterprise architecture.

  Loreal corporation-describe your impressions of the

loreal corporation-describe your impressions of the operational aspects of loreal corporation.-identify opportunities

  Create an enterprise-wide network security plan

The purpose of your plan is to describe standards that help ensure the privacy and integrity of the many different facets of a network.

  Define information assurance and security

Define information assurance and security. Employee awareness is necessary for success. Why? Describe and explain the key elements of recovering from lost assets, What are Internet connected systems? Describe five examples.

  Create a database schema that supports the companys business

One of the main functions of any business is to transform data into information. The use of relational databases and data warehousing has gained recognition as a standard for organizations. A quality database design makes the flow of data seamless..

  Analyze the challenges facing management

Analyze the challenges facing management in adapting to the changes imposed by growth and technology and Identify any assumptions you make prior to beginning your response.

  How the internet and the web make e-commerce possible

Explain how the Internet and the Web make e-commerce possible. Briefly discuss at least sixfeatures or services that support e-commerce.

  What changes have you experienced in your job role

What changes have you experienced in your job role currently as a result of technology, and how did you feel about those changes?

  What is m the size of your hypothesis set

What is M, the size of your hypothesis set?- Is there a way in which the bank could use your credit approval function to have your probabilistic guarantee? How?

Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

Submit Assignment

Academics

Major Subjects

Majors

Get In Touch

whatsapp: +1-415-670-9521

Phone: +1-415-670-9521

Email: [email protected]

TERMS & POLICIES

HELP & SUPPORT

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd