Application Security

 
Instructions
Assignment 2: LASA 1: Kenne Jarson Laboratories: Phase 1
Directions:
Kenne Jarson Laboratories is a large pharmaceutical company that specializes in the development and manufacturing of various prescription medications designed to help treat specific types of cancer. The company has three branches:

Research and Development: This section of the organization develops tests and prototypes for new drugs.
Marketing: This wing of the company markets, promotes, and advertises new products and drugs.
Manufacturing and Distribution: This area of the company is responsible for manufacturing the pharmaceuticals offered by the company and distributing them to its wholesale partners.

The company is in the process of launching a new web application portal that can be used by the company’s wholesale partners and distributors. The portal will provide access to wholesale drug pricing guides, allow orders to be placed, and track shipments. It will also provide information on the status of new drugs being developed along with their estimated date of availability for purchase.
You serve as an information security specialist with the organization and have been tasked to work with the team developing the web application portal to address the security concerns or issues that may arise.
Tasks:

A written information report on application security: Your supervisor will be making a presentation to the company’s board of directors on the need for application security in the development of the new web application portal. Your supervisor has asked you to prepare a 4- to 6-page report in which you include the following:

Provide an overview of application security and explain why it is important.
Discuss vulnerabilities commonly associated with online or web applications such as buffer overflow, denial-of-service (DoS), and structured query language (SQL) injection.
Discuss methods of attacks that the web application could be subjected to.
Identify security measures that should be taken to combat the common attacks.

Security guidelines: Develop a series of security guidelines. Describe your approach, recommendations, and steps to ensure that application security is maintained throughout the development and coding of the web application portal. Your plan should be of 2–3 pages and address at least the following items:

Security awareness and training
Secure coding
Security audit
System testing

Make sure you write in a clear, concise, and organized manner; demonstrate ethical scholarship in accurate representation and attribution of sources; and display accurate spelling, grammar, and punctuation.
Submission Details:

Collate your report and guidelines in a Microsoft Word document.
Save it as M3_A2_Lastname_Firstname.doc.
By the due date assigned, submit your report to the Submissions Area.

LASA 1 Grading Criteria and Rubric:
All LASAs in this course will be graded using a rubric. This assignment is worth 200 points. Download the rubric and carefully read it to understand the expectations.
Assignment 2 Grading CriteriaMaximum PointsProvided an overview of application security and why it is important.20Identified accurately and described the vulnerabilities commonly associated with online/web applications such as buffer overflow, DoS, and SQL injection.28Identified accurately and clearly described the methods or attacks that the web application could be subjected to.28Identified and described the security measures that should be taken to combat the common attacks.32Developed a series of security guidelines describing your approach, recommendations, and steps to ensure application security is maintained throughout the development and coding of the web application portal.48
Writing components:

Organization (12)
Usage and Mechanics (12)
APA Elements (16)
Style (4)

44Total:200
Attachments