CS507 Assignment No. 4 Announced

Assignment No. 04 SEMESTER Fall 2010 CS507- Information Systems
Total Marks: 10
Due Date: 24/1/2011

Instructions
Please read the following instructions carefully before solving & submitting assignment:
It should be clear that your assignment will get zero marks if:
o The assignment is submitted after due date.
o The submitted assignment does not open or file is corrupt.
o The assignment is copied (from other student or ditto copy from handouts or internet).
o Student ID is not mentioned in the assignment File or name of file is other than student ID.

Note:
Your answer must follow the below given specifications. You will be assigned zero marks if you do not follow these instructions.
• Font style: "Times New Roman"
• Font color: "Black"
• Font size: "12"
• Bold for heading only.
• Font in Italic is not allowed at all.
Do not put any query at MDB about this assignment, if you have any query then contact at cs507@vu.edu.pk

Deadline
Your assignment must be uploaded/submitted at or before Monday, January 24, 2011.
Marks: 10

Web application security

Dear Student
You have learned in this course about the system security risks and vulnerabilities.
That when any system goes online so it is more likely be attacked by hackers.
Hackers try to attack at the application layer of network system. Just to get into the database of system, as application layer is the bottom layer from which any computer can access to let the data traffic comes in.
You have learned about the various technical controls that ensure security like:

• Firewall
• Antivirus software
• Network security scanners etc

From the figure, it is clear that the network firewall do not protect a web application they are only designed for network level security. It blocks unwanted traffic and activity and allow legitimate traffic in.
Antivirus software detects system level issues, not the browser.
Whereas, network security scanners are a good choice to secure network services. But they do not launch any security checks to check the vulnerabilities in web applications.

Hackers can easily hack web application firewalls as they won't fix security holes in web applications and are not immune to attacks. Common attacks are:
1) Cross site scripting (XSS)
2) Cross site request forgery (CSRF)
3) SQL injection (SQL)
4) Buffer overflow etc

Question:
What are the challenges faced by WAFs (Web Application Firewalls) in order to secure the web applications? Write only five challenges. [ 10 marks]

Note: Write only precise answer and avoid giving extra details.
Firewall
Database server
Web application server
Hacker
Internet

Mgt401 GDB No. 2 Announced

"Financial Accounting II (MGT401)"

This is to inform that your 2^nd Graded Discussion Board (GDB) covering Lecture # 1 to Lecture # 34 Times New Roman]will be opened according to the following schedule

GDB Schedule

Opening Date and Time: 17th Jan, 2011 At 12:01 A.M. (Mid-Night)

Closing Date and Time: 19th Jan, 2011 At 11:59 P.M. (Mid-Night)

Topic/Area for Discussionn

"Memorandum of Association (MOA)"

Note:The discussion question will be from the area/topic mentioned above. So start learning about the topic now.

....................

Scenario

A loan provided company limited by shares named "ABC (private) Ltd." was established on 15th March, 2001, with registered office situated in Lahore under section 16 of Companies Ordinance 1984. At the time of establishment, a memorandum of association (MOA) was signed with mutual consent of promoters in which the objectives of the company was to provide all kind of loan facilities (i.e. car loans, home loans, short & long term business loans etc. ) at competitive market interest rates to both of its corporate and household clients. After a half decade, the company conducted a customer survey about financial services. They realized that the most of customers to whom they are providing services currently, also want vault services for their important documents and precious goods.

After analyzing the results of survey, ABC (Pvt.) Ltd. started to provide vault services for their clients which were not the true reflection of the objectives of company enlisted in MOA at the time of establishment.

Required:

Identify what kind of violation the company had made according to Companies Ordinance 1984. Your answer must be confined in two to three lines.

...........