SEUCS564 Saudi Electronic University Web Application Security Assessment Web Application Security Assessment (25 points) Scenario: You are the Informatio

SEUCS564 Saudi Electronic University Web Application Security Assessment Web Application Security Assessment (25 points)

Scenario:

You are the Information Security manager in a medium-sized retail organization based in Riyadh. Organizational success is based on your customers being able to purchase items securely through the company’s website. Employees habitually make purchases without following company procedures.

You have been asked to assess if there are any company vulnerabilities that may impact purchases and come up with security recommendations that may minimize any website risks, threats, and vulnerabilities.

Directions:

Write a paper that includes the following:

A description of three major risks, three threats, and three vulnerabilities of web hacking concerns for any security professional.
Compare and contrast best practices you would recommend to mitigate these web application risks, threats, and vulnerabilities.

Keep in mind; your assessment is being graded based on your ability to describe current risks, threats, and vulnerabilities in the retail industry in accordance with security goals. Use diagrams, where appropriate.

Deliverables:

Your paper should be 4-5 pages in length, not including the title and reference pages.
You must include a minimum of two credible sources and information from the module to support your writing. The Saudi Digital Library is a good source for resources.
Your paper must follow Saudi Electronic University academic writing standards and APA style guidelines, as appropriate.

There is SafeAssign Plagiarism Checker, If your score is above 25%, you will want to edit your assignment before submitting it for grading.

course name: SEU CS564: Cyber Defense in Web Attacks

Course Materials: EC-Council. (2017). Ethical hacking and countermeasures: Web applications and data servers (2nd ed.). Boston, MA: Cengage Learning. ISBN-13: 9781305883451

Chapter 3 (pages 65-85) in Ethical Hacking and Countermeasures: Web Applications and Data Servers

Recommended

Rashid, F. (2016). Latest Nginx updates address three security flaws. InfoWorld.com.
Rashid, F. (2016). The dirty dozen: 12 cloud security threats. InfoWorld.com.