Topic Internet shopping sites (clothing, shoes, books, music, or others) Project Deliverables The project requires students to perform three phases: (a) requirements analysis, (b) system and database design, and (c) a project plan. Note that in the phase 3, students are required to use the MS Project software for their project schedule. You are to submit one file (Microsoft Word) for this assignment. All diagrams and charts are to be embedded (copied and pasted) into your Microsoft Word file submission for this assignment. Please make sure they are large enough and legible. I need to be able to read them. The following layout/format including the title page and all three phases is recommended for the project. Title page (project name, author, and date) Each item below is to be labeled as below and addressed individually. No topics are to be combined. The following layout format covering a title page and all three phases is recommended for the project. Title page (project name, author, and date) Phase 1: Requirement analysis A. Problem definition B. Issues C. Objectives D. Requirements E. Constraints F. Description of the proposed system G. Logical model design Context diagram (with an accompanying written description).Diagram 0 (with an accompanying written description).Diagram 1 (Diagram 1 is optional) (with an accompanying written description).Descriptions of processes in each diagramDescriptions of outputs/inputs/performance/security or controlsThe physical layout for each inputThe input design and proceduresHow data will be output from the system?The physical layout for each outputThe output design and proceduresDatabase tables with their attributes should be presentedPrimary key(s) should be identified in each table, if anyThree steps of normalization should be included. (You are to show each step of normalization to 3NF – Be sure to identify each step in your normalization process) H. Specific requirements, if any (interface, operational, resource, performance, etc.) (You should not ignore any special interface, operational, resource, performance, etc. issues – All are to be addressed here). Phase 2: System and database design A. User interface Design an overall user interface consisting of screens, commands, controls, and features to enable users to use the system.(You are to design the screens that will be used in your project- they are not to be copied and pasted from other sources). Be sure to include a written description for each of the items that corresponds with each screen and the input/output procedures. B. Data design Develop a plan for data organization, storage, updating, and retrieval. Database design Entity-relationship diagrams You are to draw an Entity Relationship Diagram (ERD) complete with Crows Foot notation. Remember that when reading ERDs the Entities and Relationships are read in both directions.Be sure to show the minimum and maximum cardinality for each direction.Data file storage and access C. System architecture Determine the architecture of the system as Web-based interface, client/server architecture, Internet/Intranet interface, network configuration, etc. Phase 3: Project plan A list of tasks or activities needed for implementing the proposed system Estimating completion time and costs (cost includes a breakdown of labor, hardware, software, etc.) A project schedule for performing those activities (Gantt charts or PERT charts) References are expected and are to be in complete APA format. Note that there is no other required software package except the MS Project software in this ITEC-630 course. As a result, you are only required to use the MS Project software to handle the scheduling part of the project and for other parts, you can use any word editing software or any drawing tools software. Individual Project Rubric The individual project will account for 20% of your total points possible and students should use the APA format for the format of the individual project reports. The following rubric will be used when grading your individual project: Qualities and Criteria Poor [0-80) Good [80-90) Excellent [90-100] Format/Layout § Presentation of the text and structuring of text in an organized and thoughtful manner § Follows phases requirements (Weight 20%) Follows poorly the requirements related to format and layout. Follows for the most part all the requirements related to format and layout. Some requirements are not followed. Closely follows all the requirements related to format and layout. Content/Information § All phases of the project are addressed and contents in each phase are adequate § The project proposal is technically sound and realistic § The project is done using techniques covered in this course § MS Project software is used in the project plan § The project design can be implemented in reality § Activities and information are constructed in a logical pattern among phases to support the solution (Weight 70%) The project does not cover all phases and it is not done for the most part with techniques discussed in this course. The required software is used poorly in the project plan. The project proposal is hardly realistic and the tasks proposed can not be done easily in reality. Activities and information among phases are badly designed and do not support the solution. The project covers all phases with adequate contents in each phase for the most part and it is done with some techniques discussed in this course. The required software is used in the project plan for the most part. The project proposal is relatively realistic and some proposed tasks can be done in reality. Activities and information among phases for the most part are designed to support the solution. The project covers all phases with adequate contents and it is done with techniques discussed in this course. The required software is used in the project plan. The project proposal is realistic and the tasks proposed can be done in reality. Activities and information among phases are designed to support the solution. Quality of Writing § Clarity of sentences and paragraphs § No errors and spelling, grammar and use of English § Organization and coherence of ideas § APA style compliance (Weight 10%) The project is not well written, and contains many spelling errors, and/or grammar errors and/or use of English errors. The project is badly organized, lacks clarity and/or does not present ideas in a coherent way and it is somehow APA style compliance. The project is well written for the most part, without spelling, grammar or use of English errors. The project is for the most part well organized, clear and presents ideas in a coherent way and it is somehow APA style compliance. The project is well written from start to finish, without spelling, grammar or use of English errors. The project is well organized, clear and presents ideas in a coherent way and it is completely APA style compliance. * Some parts of this rubric are extracted from Dr. Stella Porto’s posting for ITEC-610.

CompetencyIn this project, you will demonstrate your mastery of the following competencies:Write secure communications through the application of current encryption technologies and techniquesDesign and implement code that complies with software security testing protocolsScenarioYou work as a developer for a software company, Global Rain, an engineering company that specializes in custom software design and development for entrepreneurs, businesses, and government agencies around the world. At your company, part of your mission is that “Security is everyone’s responsibility.”At Global Rain, you are tasked with working with a client, Artemis Financial. Your client is a financial consulting company that develops individualized financial plans for savings, retirement, investments, and insurance for their patrons.As an important step in Artemis Financial’s desire to modernize its operations and as a crucial part of the success of their custom software, they want to implement and apply the most current and effective software security. Artemis Financial has a public web interface and is seeking Global Rain’s expertise in taking steps to protect their client data and financial information.Specifically, Artemis Financial is seeking to add a file verification step to their web application to ensure secure communications. When the web application is used to transfer data, they will need a data verification step in the form of a checksum. You have been asked to take their current software application and add secure communication mechanisms to meet their software security requirements. You will deliver a production quality integrated application that includes secure coding protocols.DirectionsYou are tasked with examining Artemis Financial’s software to address any security vulnerabilities. This will require you to refactor the code base to add functionality to meet software security requirements for Artemis Financial’s application. Specifically, you will need to follow the steps outlined below to facilitate your findings, address and remedy all areas, and document your work in the Practices for Secure Software Report.Algorithm Cipher: Review the scenario and the Supporting Materials. Determine an appropriate encryption algorithm cipher to deploy given the security vulnerabilities, justifying your reasoning. In your Practices for Secure Software Report, be sure to address the following:Provide a brief, high-level overview of the encryption algorithm cipher.Discuss the hash functions and bit levels of the cipher.Explain the use of random numbers, symmetric vs non-symmetric keys, and so on.Describe the history and current state of encryption algorithms.Certificate Generation: Generate appropriate self-signed certificates using the Java Keytool, which is used through the command line.To demonstrate that the keys were effectively generated, export your certificates (CER file) and submit a screenshot of the CER file in your Practices for Secure Software Report.Deploy Cipher: Refactor the code and use security libraries to deploy and implement the encryption algorithm cipher to the software application. Verify this additional functionality with a checksum.Include a screenshot of the checksum verification in your Practices for Secure Software Report. The screenshot must show your name and a unique data string that has been created.Secure Communications: In the application.properties file, refactor the code to convert HTTP to the HTTPS protocol. Compile and run the refactored code. Then once the server is running, you can verify secure communication by typing https://localhost:8443/hash in a new browser to demonstrate that the secure communication works successfully.Provide a screenshot of the web browser that shows a secure webpage and include it in your Practices for Secure Software Report.Secondary Testing: Complete a secondary static testing of the refactored code using the dependency check tool provided below to ensure code complies with software security enhancements. You only need to focus on the code you have added as part of the refactoring. Complete the dependency check and review the output to ensure you did not introduce additional security vulnerabilities.Include (1) a screenshot of the refactored code executed without errors and (2) a screenshot of the report of the output from the dependency check static tester in your Practices for Secure Software Report.Functional Testing: Identify syntactical, logical, and security vulnerabilities for the software application by manually reviewing code.Complete this functional testing and include a screenshot of the refactored code executed without errors in your Practices for Secure Software Report.What if I receive errors or new vulnerabilities?You will need to iterate on your design and refactored code, address vulnerabilities, and retest until no new vulnerabilities are found.Summary: Discuss how the code has been refactored and how it complies with security testing protocols. In the summary of your Practices for Secure Software Report, be sure to address the following:Refer to the Vulnerability Assessment Process Flow Diagram and highlight the areas of security that you addressed by refactoring the code.Discuss your process for adding layers of security to the software application and the value that security adds to the company’s overall wellbeing.Point out best practices for maintaining the current security of the software application to your customer.

Question 1 Faced with the need to deliver risk ratings for your organization, you will have to substitute the organization’s risk preferences for your own. For, indeed, it is the organization’s risk tolerance that the assessment is trying to achieve, not each assessor’s personal risk preferences. 1. What is the risk posture for each particular system as it contributes to the overall risk posture of the organization? 2. How does each attack surface – its protections if any, in the presence (or absence) of active threat agents and their capabilities, methods, and goals through each situation—add up to a system’s particular risk posture? 3. In addition, how do all the systems’ risks sum up to an organization’s computer security risk posture? Question 2 Given multivariate, multidimensional events generated by adaptive human agents, perhaps it would not be too far a stretch to claim that no two events are precisely the same. Given the absence of actuarial data, what can a poor security architect do?