Group PowerPoint Residency - Day 2 Residency Assignment
sri169025
Spring2020_Week13Residency_Day2_Group3_sample1.ppt002835518 - Chalamalasetty, Srinivas
002826551 - Ganji, Umakumar
002849521 - Karra, Ravi Sastry
002838332 - Kukkala, Indrakaran Reddy
002826761 - Malineni, Srinivas
002837463 - Namburu, Krishna Chaitanya Chowdary
University of the Cumberlands
THREAT MODELING FOR LIBRARY RESOURCE BY GROUP 3
LIBRARY WEBSITE SYSTEM
- Scenario
- Graphical User interface that allows user to login
- Graphical User interface that allows user to create account
- Graphical User interface that allows user to access the books and other material from the library database system
- Threat Model
- Website outsourced tools and security firewalls are not completely reliable for website development.
- Encrypt and decrypt the data sent ad received from and to the user.
- Mitigations
- Identification
- Authentication
LIBRARY WEBSITE SYSTEM
LIBRARY DATABASE SYSTEM
- Scenario
- Database tool and architecture that allows user to CRUD information
- Database tool and architecture that allows user to that links between the Graphical User Interface of the website and the database of the library resources
- Database tool and architecture that allows user to post and administer on a reliable network system
- Threat Model
- Modify data over public network like WiFi.
- Load on the database system for multiple threads of requests.
- Mitigation
- Identification and authentication of user.
- Use approved database tools and reviewed architecture for uninterrupted data flow.
WEB SERVER ATTACKS & COUNTERMEASURES
- DOS attack
- Website Defacement
- Misconfiguration attacks
- Phishing Attack
- Vulnerability Scanning
DB SERVER ATTACKS & COUNTERMEASURES
- Excessive privileges
- Database injection attacks
- Storage media exposure
- Exploitation ofdatabases vulnerable
DFD DIAGRAM FOR WEB/DB SERVER
USER DB READ ACCESS
LIBRARIAN/ADMIN DB READ/WRITE ACCESS
THANK YOU
