You are working for an organisation that is using a very old web-based applicationthat was developed in-house and is only used by members of the organisation. Theleader of the web development team has indicated that the application needs to beurgently redeveloped as it is dependent upon outdated frameworks that haverecently been found to be vulnerable to SQL injection attacks, however theorganisation is currently short on funding. One of the security team has suggestedusing a web application firewall to prevent common attacks instead.(a) Explain the additional security that would be provided by the web applicationfirewall.(b) Discuss any alternative or complimentary technologies that would assist insecuring the application.

(a) The following securities provided by the web application firewall: A WAF (Web Application…

Answered: (a) Explain the additional security…

(a) Explain the additional security that would be provided by the web api firewall. (b) Discuss any alternative or complimentary technologies that would assist in securing the anplication.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Related questions

Q: Identify, in addition to the firewall we created, three (3) significant and different…

A: A firewall is a fundamental component of every business' cybersecurity infrastructure. Firewalls…

Q: Consider the issue of network and internet security from the perspective of a firewall. First, you…

A: A firewall is a network security device that acts as a barrier between an internal network and…

Q: The OSI security architecture provides a systematic framework for defining security attacks,…

A: 1. The OSI security architecture provides a systematic framework for defining security attacks,…

Q: Discuss the importance of cross-origin resource sharing (CORS) in web security. How does it work,…

A: Cross-Origin Resource Sharing (CORS) is a security feature implemented by web browsers to control…

Q: In the context of web security, explain the concept of Cross-Site Request Forgery (CSRF) and…

A: Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS) are both common web security…

Q: a) Discuss TWO (2) of the best encryptions that are available today for social media platform users.…

A: The social medias are most secure now a days. These are using many encryption techniques for the…

Q: enumerate the essential components of the a.NET security requirements. You may refer to the OWASP…

A: NET security: NET is a Microsoft framework for developing a wide range of Windows-based…

Q: outline the key elements of the a.NET security standards. You may consult the Microsoft.NET security…

A: NET is the Microsoft platform that is used to construct a variety of Windows-based applications.…

Q: Presenting the a.NET security standards' major elements. Start your research with reputable sites…

A: 1) The OWASP (Open Web Application Security Project) GitHub page is a platform where OWASP, a…

Q: An explanation of firewalls' function in the context of network security and protection is required.…

A: Introduction: A firewall is a piece of network security equipment that keeps track of all incoming…

Q: Discuss the concepts of web security, including Cross-Site Scripting (XSS) and Cross-Site Request…

A: When it comes to web applications ensuring their safe and reliable operation is of importance.Among…

Q: Besides the firewall that we constructed, can you describe three (3) important and distinct places…

A: Injection flaws: Failure to screen untrusted input causes injection problems. Passing unfiltered…

Q: Summarise a.NET security advice in 200 words. Microsoft's Open Web Application Security Initiative…

A: The .NET Security Portal and GitHub repository, developed by Microsoft's Open Web Application…

Q: Do you have any suggestions for a critical and analytical analysis of serverless computing security…

A: Application development teams want to use more lightweight cloud services to provide application…

Q: The essential NET security standards are listed here. Your investigation should begin with reputable…

A: .NET, developed by Microsoft, is a robust and versatile programming platform used to build various…

Q: An organization that purchased security products from different vendors is demonstrating which…

A: To be determine: Select right option

Q: Demonstrate one of the four access control strategies. What makes it unique

A: Access control strategies are critical components of information security, dictating who or what may…

Q: identity three(3) significant and distinct areas for which our application and its environment is…

A: Injection flaws Injection flaws result from a classic failure to filter untrusted input. It can…

Q: Provide an inventory of the most important aspects of the a.NET security requirements. You may…

A: Introduction: Microsoft's NET platform is used to create a range of Windows-based apps. Principal…

Q: If you could perhaps describe the a.NET security recommendations in no more than 200 words, that…

A: .NET security recommendations include using secure coding practices, implementing least privilege,…

Q: What are some firewall implementation best practices?

A: FIREWALL: Firewall is basically the security system which is used to control the incoming and…

Q: a.NET security standards are explained. Start your inquiry with reliable sources like the OWASP…

A: .NET is a software development framework developed by Microsoft that is used to build a wide range…

Q: Identify, in addition to the firewall we created, three (3) significant and different…

A: Vulnerability: faults in injection: Failure to screen untrusted input results in injection problems.…

Q: Explore the security considerations in web development, including common vulnerabilities like…

A: Web development isn't just about crafting beautiful websites; it's also about ensuring that these…

Q: Find the product specification for the Intrusion Detection & Prevention System (IDPS) features of…

A: An IDS is a device or software application that monitors a malicious activity or policy violations…

Q: Could you perhaps explain what the phrase "Firewall vulnerability exploit" refers to in more detail?

A: Defined the phrase "Firewall vulnerability exploit"

Q: Please provide an example illustrating the implementation of one of the four potential access…

A: Access control techniques refer to various methods and strategies implemented to regulate and manage…

Q: The fundamentals of a.NET's security requirements are laid forth. If you're not sure where to start,…

A: Authentication is verify the self of a user, device, or Approach attempting to access a store. In…

Q: The a.NET security standards' most important characteristics are presented. The OWASP GitHub page,…

A: .NET is a platform developed by Microsoft that may be utilized to create a wide variety of programs…

Q: Mention the criterions you use to advise a specific Access Control Model? The discuss whether a…

A: This question falls under Computer Networks. Access control is a fundamental component of data…

Q: Summarize the a.NET security recommendations in no more than 200 words. For more information about…

A: Security is a crucial aspect of any application, and .NET, Microsoft's development platform,…

Q: The core a.NET security standards are described. Start your research with reliable sources like…

A: .NET is a software development framework developed by Microsoft that is used to build a wide range…

Q: Please list the essential a.NET security components and explain why they are so important. The Open…

A: Security components within the .NET framework are crucial in safeguarding applications from threats…

Q: In the future, distributed security systems (DSS) will still be implemented across either intranets…

A: Given: The Decision Support System, or DSS, is the foundation of every project that assists us in…

Q: Discuss the purpose and implementation of web application firewalls (WAFs). How do they protect…

A: A security tool called a Web Application Firewall (WAF) is made to shield web applications from…

Q: Discuss the operation and significance of firewall devices in network security, including stateful…

A: In this question significance and operation of firewall devices need to be explained along with…

Question

You are working for an organisation that is using a very old web-based application
that was developed in-house and is only used by members of the organisation. The
leader of the web development team has indicated that the application needs to be
urgently redeveloped as it is dependent upon outdated frameworks that have
recently been found to be vulnerable to SQL injection attacks, however the
organisation is currently short on funding. One of the security team has suggested
using a web application firewall to prevent common attacks instead.
(a) Explain the additional security that would be provided by the web application
firewall.
(b) Discuss any alternative or complimentary technologies that would assist in
securing the application.

Expert Solution

This question has been solved!

Explore an expertly crafted, step-by-step solution for a thorough understanding of key concepts.

SEE SOLUTION Check out a sample Q&A here

Step 1

VIEW

Step 2

VIEW

Step by step

Solved in 2 steps

SEE SOLUTION Check out a sample Q&A here

Knowledge Booster

Learn more about

Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.

Similar questions

Research the three types of firewalls available to corporations and answer the questions below. Describe each type of firewall. Determine which types can reside on a server (as opposed to a networking appliance). Of the server-supported firewalls, choose which types of firewalls are best for your organization. Explain. What are the best locations for these firewalls? Why? As an example, research and describe the 'standard' ingress/egress rules appropriate for the File and Print Services server role.
Important criteria for an a.security NET are laid down. You may begin your investigation at the Open Web Application Security Project's GitHub page, the Microsoft.NET Security website, or any other reliable resource.
A popular computer network publication stated at one time that the enterprise firewall was dead. It boldly stated that the exterior firewalls of the organization should be torn down and replaced with host-based firewalls instead. Is this insane, or is it the best new practice in security management? Explain your answer.
An explanation of firewalls' function in the context of network security and protection is required. Don't forget to define the phrase and include examples that highlight its value to the business.
The stakeholders of a software company have four new security requirements that they are considering including in the next release of their flagship product: Two-factor authentication (2FA), Captcha for Bot Detection (CBT), Password Expirations (PEX), and Role-base access control (RBA). Given the time constraints, they may not be able to include all, so they need to prioritize these requirements based on three criteria: Maintainability (MA), Ease of Use (EU), and Integration Support (IS). They have the following pairwise preferences of the criteria: Maintainability is three times as important as Ease of Use Ease of Use is two times as important as Integration Support Maintainability is five times as important as Integration Support Based on the above information, do the following: Rank the four security requirements using the criteria weights and the following alternatives matrix: MA EU IS 2FA 0.36 0.29 0.09 CBT 0.13 0.33 0.18 PEX 0.27 0.21…
What are common attacks against access control methods and appropriate countermeasures to mitigate potential attacks on access control methods?
Please list the most important parts of a.NET protection and tell us why they are so important. The Open Web Application Security Project's (OWASP) GitHub page, the Microsoft.NET Security website, and any other good websites that come to mind are all on the table.
the most critical features of the a.NET security standards are described The Microsoft.NET security website, the OWASP GitHub page, and any other trustworthy sites are all good choices for starting your research.
What is the primary distinction between a firewall and an intrusion detection system? What is the difference between a host-based and a network-based firewall, as well as a host-based and a network-based intrusion detection system?
Could you maybe clarify what what is meant by the phrase "Firewall vulnerability exploit"?
Explain why the Injection Flows, Cross Site Scripting, Security Misconfiguration, Failure to Restrict URL Access, and Insecure Direct Object References are considered security risks?
provide an overview of the most critical elements of the a.NET security guidelines Use resources like as the Microsoft.NET security website, the OWASP GitHub page, and any other trustworthy resources you come across.