NETW7008 : Secure Programming The Security Analysis - IT Assignment Help

Assignment Task:

Task:

Summary
There are two items of coursework for the module, that are collectively worth 50% of your module mark. They are CW1, a security analysis, and CW2, a software development. The remaining 50% comes from your examination mark.

1. The security analysis, which will also require a software modification, is for 20% of your module mark and it will test the following module level outcomes:

•  Have a thorough understanding of the main attack vectors commonly used to attack software and be able to design and implement software that reduces the likelihood of those vulnerabilities being exploitable
•  Conduct a detailed and critical analysis of existing software and utilise the results to produce secure modifications to treat or mitigate any vulnerabilities found

2. The software development is for 30% of your module mark. You will produce a secure prototype of a student record management system in the programming language C/C++, accessed through a web interface. This will test the following module level outcomes.

•  Have a thorough understanding of the principles and issues involved in designing secure software and be able to utilise them in the construction of complex software
•  Have a thorough understanding of the main attack vectors commonly used to attack software and be able to design and implement software that reduces the likelihood of those vulnerabilities being exploitable
•  Design and implement concurrent and distributed software which operates in hostile environments
•  Design and implement secure software that utilises the underlying security model of the OS and hardware.

Submission

•  The security analysis must be uploaded to Moodle as a single docx or pdf file before Friday Week 8, March 19 1pm. Harvard referencing must be used where applicable. It must be treated as an individual piece of work. The University rules concerning plagiarism, collusion and contract cheating apply. The module guide contains advice on the topic of academic integrity and a link to a training course that you might find useful.

•  The software development must be uploaded as a zip file (for the code) and a single docx or pdf file (for the report) before Friday Week 12, April 30 1pm. You should also include in your report a link to a ten-minute video on Google Drive that shows you using the software (five minutes) and explaining the code (five minutes) with access set so that anybody in Google@Brookes can view the video if they have the link.

CW1: Security analysis
The purpose of your first coursework is to see whether you can discover and fix security flaws in other people’s code, before you then attempt to build secure software from scratch for your second coursework.

The program you have been given has several security flaws and is intended to enable lecturers to view and store marks for students on modules. It reads in a file pwds.txt containing for each lecturer their passwords (encrypted) and the modules (up to five) that they are working on. It authenticates the user by asking them for a name and password and then presents them with a list of their modules. The user can then select a module, see a list of marks for each student and change the marks for a student. You may assume that pwds.txt is vulnerable to unauthorised writes but that the other files are not.

The above  NETW7008 IT Assignment has been solved by our  IT Assignment  Experts at My Uni Paper. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.