Analyzing & Visualizing Data - Topic PPT
kushi2286
DiscussionWeek-4.pptx
Computer System and Potential security problems
Susmitha Venkittaraman University of the Cumberlands Analyzing and Visualizing data-ITS-530 Dr. Izzat Alsmadi
Organizational Overview
1.Business process Management lay the foundation for back-office and front-office business functions — from managing invoices and records to quickly opening customer accounts and offering real-time promotional offers to prospects.
2. IBM BPM is used by this organization for 2 applications.
2
Organization- Bank
Software used- IBM Business process management software
Purpose- To develop On-Boarding and Lending application
On- Boarding Application
Task 1- Customer creates a login and types personal information.
Task 2- First level Checker- Checks the credentials of the person.
Task 3- Second level Checker- More checks and rejects the application if any issues and updates with the notes.
Task 4- Initiates the application process for the customer.
The above are the various tasks in ON- Boarding application created using IBM BPM
3
Lending Application
Customer gives the details and applies for the loan.
Checker 1- checks the information of the customer with the help of 3rd parties.
Checker 2- Analysis on the repayment capacity of the person.
Checker 3- Quotes the down payment required for loan sanction.
Loan approvals and sanctions.
The above are the various tasks in lending application created using IBM BPM
4
IBM BPM- Security issues
SQL injection- an attacker can easily modify the query made by the application to the database.
Cross-site scripting- Injects the malicious code into the application.
Event Manager issue- Events can be stopped and resumed by hacker easily using the rest API.
SQL Injection Impacts
Data can be selected, updated or deleted from our database.
Chances for information disclosure.
Data integrity is lost due to changes made to certain data in the database by the attacker.
Cross-site scripting Impacts
Credentials can be stolen.
User account can be Hijacked.
Client computers can be accessed.
Data can be modified.
Event Manager issue in IBM BPM
Event manager runs the task in a specified interval of time.
Permission or authorization not required to stop and resume event manager.
This may cause anyone to stop and resume the event.
Impact on Us
Our applications have sensitive data about the customers.
Data modification Or leak = loss of trust by customers.
Customer satisfaction, one of our goals will be had to achieve due to spurious effects of the software.
Interrupts the application functionality and damages its performance.
Steps to resolve issues
Need for a project team to analyze the security issues.
The new team may have to identify different solution or software to eliminate these issues.
.MsftOfcThm_Accent1_Fill { fill:#4472C4; } .MsftOfcThm_Accent1_Stroke { stroke:#4472C4; }
