ScenarioYou work as a developer for a software company, Global Rain, an engineering company that specializes in custom software design and development for entrepreneurs, businesses, and government agencies around the world. At your company, part of your mission is that “Security is everyone’s responsibility.”At Global Rain, you are tasked with working with a client, Artemis Financial. Your client is a financial consulting company that develops individualized financial plans for savings, retirement, investments, and insurance for their patrons.As an important step in Artemis Financial’s desire to modernize its operations and as a crucial part of the success of their custom software, they want to implement and apply the most current and effective software security. Artemis Financial has a public web interface and is seeking Global Rain’s expertise in taking steps to protect their client data and financial information.Specifically, Artemis Financial is seeking to add a file verification step to their web application to ensure secure communications. When the web application is used to transfer data, they will need a data verification step in the form of a checksum. You have been asked to take their current software application and add secure communication mechanisms to meet their software security requirements. You will deliver a production quality integrated application that includes secure coding protocols.DirectionsYou are tasked with examining Artemis Financial’s software to address any security vulnerabilities. This will require you to refactor the code base to add functionality to meet software security requirements for Artemis Financial’s application. Specifically, you will need to follow the steps outlined below to facilitate your findings, address and remedy all areas, and document your work in the Practices for Secure Software Report.Algorithm Cipher: Review the scenario and the Supporting Materials. Determine an appropriate encryption algorithm cipher to deploy given the security vulnerabilities, justifying your reasoning. In your Practices for Secure Software Report, be sure to address the following:Provide a brief, high-level overview of the encryption algorithm cipher.Discuss the hash functions and bit levels of the cipher.Explain the use of random numbers, symmetric vs non-symmetric keys, and so on.Describe the history and current state of encryption algorithms.Certificate Generation: Generate appropriate self-signed certificates using the Java Keytool, which is used through the command line.To demonstrate that the keys were effectively generated, export your certificates (CER file) and submit a screenshot of the CER file in your Practices for Secure Software Report.Deploy Cipher: Refactor the code and use security libraries to deploy and implement the encryption algorithm cipher to the software application. Verify this additional functionality with a checksum.Include a screenshot of the checksum verification in your Practices for Secure Software Report. The screenshot must show your name and a unique data string that has been created.Secure Communications: In the application.properties file, refactor the code to convert HTTP to the HTTPS protocol. Compile and run the refactored code. Then once the server is running, you can verify secure communication by typing https://localhost:8443/hash in a new browser to demonstrate that the secure communication works successfully.Provide a screenshot of the web browser that shows a secure webpage and include it in your Practices for Secure Software Report.Secondary Testing: Complete a secondary static testing of the refactored code using the dependency check tool provided below to ensure code complies with software security enhancements. You only need to focus on the code you have added as part of the refactoring. Complete the dependency check and review the output to ensure you did not introduce additional security vulnerabilities.Include (1) a screenshot of the refactored code executed without errors and (2) a screenshot of the report of the output from the dependency check static tester in your Practices for Secure Software Report.Functional Testing: Identify syntactical, logical, and security vulnerabilities for the software application by manually reviewing code.Complete this functional testing and include a screenshot of the refactored code executed without errors in your Practices for Secure Software Report.What if I receive errors or new vulnerabilities?You will need to iterate on your design and refactored code, address vulnerabilities, and retest until no new vulnerabilities are found.Summary: Discuss how the code has been refactored and how it complies with security testing protocols. In the summary of your Practices for Secure Software Report, be sure to address the following:Refer to the Vulnerability Assessment Process Flow Diagram and highlight the areas of security that you addressed by refactoring the code.Discuss your process for adding layers of security to the software application and the value that security adds to the company’s overall wellbeing.Point out best practices for maintaining the current security of the software application to your customer.What to SubmitTo complete this project, you must submit the following:Practices for Secure Software ReportUse the template provided and submit one comprehensive report of the steps you have taken to increase the layers of security in Artemis Financial’s software application. You will also submit the zipped project files that contain the refactored code. See below for more information. Include details about the code files being “attachments” to the completed report.CS 305 Project Two Refactored Code Base.zipRefactor the code provided in the Supporting Materials section. Be sure to zip the refactored code into one zipped project folder that contains all files associated with Artemis Financial’s software application. Submit the zipped project folder in addition to the Practices for Secure Software Report. Include details about the code files being “attachments” to the completed report.Supporting MaterialsThe following resource(s) may help support your work on the project:Java Software Application: CS 305 Project Two Code Base.zipRefactor the code to meet the software security needs of your customer. You will need to submit your refactored code.

Create a Disaster Recovery Plan for either the organization they work for or one they wish to work for in the future. The plan will follow the template/example provided. The student should request prior authorization of the company to be addressed to ensure that all students are working on unique companies.**Even though this is a technical document, for academic purposes, all sources should be cited and referenced.APA FormatNo plagiarismReferences

THE ASSIGNMENT Provide a proposed network topology design using a software program capable of developing a diagram such as Microsoft PowerPoint, Microsoft Visio, or an evaluation copy of business graphics software such as SmartDraw or EDraw Max. The final product should be submitted in a Microsoft Word document. Specify the type(s) of media (fiber and copper), network devices (switches and routers), protocols, WAN circuits and connectivity, remote access method and authentication, fault tolerance and security in your design.THE SCENARIO Design a local and wide area network at seven sites with remote access for a 3,500 person international company in the pharmaceutical industry. The company recently was formed through a number of acquisitions via venture capitalists. There are seven company locations each containing one building including the corporate headquarters in New York, NY – 1000 employees, San Diego, CA - 250 employees, central research in Houston, TX - 750 employees, Madrid - 500 employees, India – 50 employees, London - 150 employees, China - 300 employees and 500 remote users - sales force. There is a diverse computing environment with no standards in place including a combination of devices (e.g. network printers) and desktop operating systems (e.g. Macintosh OS, UNIX, Linux and Microsoft Windows). There are three different data centers in operation. The first data center is located in New York, NY being used as the main corporate data center (e.g. email, file, print, database and intranet web servers) the second is located in San Diego, CA being used for R&D (e.g. high performance computing, technical application servers and video-streaming services), and the third is located in Houston, TX being used for disaster recovery. The company does large file transfers (e.g. video and graphics) between San Diego, CA and Houston, TX. There is one Internet connection located in the corporate data center that services all company locations.