Description
Modify an existing Java Web application that violates several Payment Card Industry guidelines and recommendations. Your task is to locate the issues, identify what is wrong and then fix the code. You will discuss each issue in terms of why the issue may cause a security vulnerability, and how you specifically fixed the issue.
The current code, uses Java JSP and Servlets to allow a user to login to their account and view credit card data stored in the database. The functionality is relatively simple but several PCI compliance rules have been violated that will prevent the application from being approved by a PCI software auditor.
You should first load up the application, populate the database and make sure the application is working in your environment as expected. The application uses the Java Derby relational database. The script used to populate the application is attached as well as the Java web project itself. You should be able to open the existing project using NetBeans. However; you may need to load the Derby drivers to the libraries for the project.
Explanation & Answer
Hello,I have changed the code and the outputs are now different than the previous version with PCI requirement violations. I am adding the MS word and the source codes.I am waiting to hear from you if any change is needed. Please let me know for any doubt, more work and any change.I hope it helps.See you.Bye
After loading the project and running it in the browser browser the first violation of PCI DSS requirement
that is obvious is shown in the following image
So all the details of the card information is shown.
This violates the DSS requirement 7 and 9
So how can we fix it?
To fix it I attempted to hide the full credit card information.
And I got the following screen for the user hiding the details of the card information using asterisk.
To do this I had to change the java code as following:
/*
* To change this license header, choose License Headers in Project Properties.
* To change this template file, choose Tools | Templates
*...
Review
Review
24/7 Homework Help
Stuck on a homework question? Our verified tutors can answer all questions, from basic math to advanced rocket science!
Similar Content
Related Tags
Oliver Twist
by Charles Dickens
Dr Jekyll And Mr Hyde
by Robert Louis Stevenson
Persuasion
by Jane Austen
Narrative of the Life of Frederick Douglass
by Frederick Douglass
Fools Crow
by James Welch
Treasure Island
by Robert Louis
Ezperanza Rising
by Pam Muñoz Ryan
Shutter Island
by Dennis Lehane
As I Lay Dying
by William Faulkner