Answered step by step
Verified Expert Solution
Link Copied!

Question

1 Approved Answer

I'm having trouble developing a python application that includes the request below to perform certain functionalities: 1. Password Login form - This Python form allows

I'm having trouble developing a python application that includes the request below to perform certain functionalities:

1. Password Login form - This Python form allows a user to login to a simple web application with a username and password. A file can be used to store the username and password for validated users for this activity. No additional Web application functionality is needed after successful login other than a Greeting of your choice and the ability to update the password in a form.

2. Password update Form - This Python form allows a user to update a user's password after they have successfully logged in.

3. Authentication functions - These Python functions that will check the following NIST SP 800-63B criteria are met upon login or upon password update: SHALL be at least 8 characters in length SHOULD be no more than 64 characters in length SHALL compare the prospective secrets against a list that contains values known to be commonly-used, expected, or compromised (Provided as CommonPasswords.txt) If the chosen secret is found in the list, the application SHALL advise the subscriber that they need to select a different secret, SHALL provide the reason for rejection, and SHALL require the subscriber to choose a different value SHALL implement a time-based rate-limiting mechanism that effectively limits the number of failed authentication attempts that can be made on the subscriber's account. For this exercise throttling should start after 15 attempts. When the subscriber successfully authenticates, the verifier SHOULD disregard any previous failed attempts for that user from the same IP address

4. Logger - Make a log to log all failed login attempts. The Log should include date, time and IP address.

5. Log Analyzer - Make a Python log analyzer application that reads the log file created in part d to identify and geo-locate all IP addresses where more than 10 failed attempts in a period of less than 5 minutes. The geolocation should include the Lat/Long value provide from the IP Address location.

This is a sample report: 100.16.4.23 had 12 failed login attempts in a 5-minute period on Jul 7, 2019. 100.16.4.23 has a Lat/Long of 41.2908816/-73.610759. Thank you!

CommonPassword.txt:

password 123456 12345678 1234 qwerty 12345 dragon baseball football letmein monkey abc123 mustang michael shadow master jennifer 111111 2000 jordan superman harley 1234567 hunter trustno1 ranger buster thomas robert soccer batman test pass killer hockey george charlie andrew michelle love sunshine jessica pepper daniel access 123456789 654321 joshua maggie starwars silver william dallas yankees 123123 ashley 666666 hello amanda orange biteme freedom computer sexy thunder nicole ginger heather hammer summer corvette taylor austin 1111 merlin matthew 121212 golfer cheese princess martin chelsea patrick richard diamond yellow bigdog secret asdfgh sparky cowboy camaro anthony matrix falcon iloveyou bailey guitar jackson purple scooter phoenix aaaaaa morgan tigers porsche mickey maverick cookie nascar peanut justin 131313 money samantha steelers joseph snoopy boomer whatever iceman smokey gateway dakota cowboys eagles chicken black zxcvbn please andrea ferrari knight hardcore melissa compaq coffee booboo johnny bulldog xxxxxx welcome james player ncc1701 wizard scooby charles junior internet mike brandy tennis banana monster spider lakers miller rabbit enter mercedes brandon steven fender john yamaha diablo chris boston tiger marine chicago rangers gandalf winter barney edward raiders badboy spanky bigdaddy johnson chester london midnight blue fishing 0 hannah slayer 11111111 rachel redsox thx1138 asdf marlboro panther zxcvbnm arsenal oliver qazwsx mother victoria 7777777 jasper angel david winner crystal golden butthead viking jack iwantu shannon murphy angels prince cameron girls madison wilson carlos willie startrek captain maddog jasmine butter booger angela golf lauren rocket tiffany theman dennis liverpoo flower forever green jackie muffin turtle sophie danielle redskins toyota jason sierra winston debbie giants packers newyork jeremy casper bubba 112233 sandra lovers mountain united cooper driver tucker helpme pookie lucky maxwell 8675309 bear gators 5150 222222 jaguar monica fred happy hotdog gemini lover xxxxxxxx 777777 canada nathan victor florida 88888888 nicholas rosebud metallic doctor trouble success stupid tomcat warrior peaches apples fish qwertyui magic buddy dolphins rainbow gunner 987654 freddy alexis braves 2112 1212 cocacola xavier dolphin testing bond007 member calvin voodoo 7777 samson alex apollo fire tester walter beavis voyager bonnie rush2112 beer apple scorpio jonathan skippy sydney scott red123 power gordon travis beaver star jackass flyers 232323 zzzzzz steve rebecca scorpion doggie legend ou812 yankee blazer bill runner birdie 555555 parker topgun asdfasdf heaven viper animal 2222 bigboy 4444 arthur baby private godzilla donald williams lifehack phantom dave rock august sammy cool brian platinum jake bronco paul mark frank heka6w2 copper billy cumshot garfield willow little carter albert kitten super jordan23 eagle1 shelby america 11111 jessie house free 123321 chevy white broncos horney surfer nissan 999999 saturn airborne elephant marvin action adidas qwert kevin 1313 explorer walker police christin december benjamin wolf sweet therock king online brooklyn teresa cricket sharon dexter racing gregory teens redwings dreams michigan hentai magnum 87654321 nothing donkey trinity digital 333333 stella cartman guinness 123abc speedy buffalo 

Step by Step Solution

There are 3 Steps involved in it

Step: 1

blur-text-image

Get Instant Access to Expert-Tailored Solutions

See step-by-step solutions with expert insights and AI powered tools for academic success

Step: 2

blur-text-image

Step: 3

blur-text-image

Ace Your Homework with AI

Get the answers you need in no time with our AI-driven, step-by-step assistance

Get Started

Students also viewed these Programming questions

Question

=+a. Why would such a policy not fit well in the multiplier model?

Answered: 1 week ago