Q23 You have been appolnted as a Head of Secure Software consultant for a new student information system (SIS) development project for the Univeraiti Tun Hussein Onn Malaysla (UTHM). SIS will be developed as both web-based and moblle-based system. SIS development applied Development, Security, and Operations (Devsecops) model as project methodology. The syatem's modules involve Student Record Maragement, Attendance, Exam Reaulta, Transcripts, Medical Record, Class Schedules, Awards, and Student Dashboards. Based on the scenario, answer the following questions: (a) Identify TWO (2) potential sccurity risks for cach of the element in the STRIDE model for the mobile-based system. (12 marks) (b) Propose an input validation flowchart to validate input from students registration. Assume the inputs are: Student Name, Address (Street Name, Clly, state/Province, Postcode), Identity Card Number, Date of Bitth, Matric Card Number, Contact Number, and Program Hame. ( 8 marks)