Answered step by step
Verified Expert Solution
Link Copied!

Question

1 Approved Answer

scar-nois- AssignmenLl Part 1: Identify Security Flaws. Make sure that you have reviewed the practice activities and its solution before attempting this assignment. , you

image text in transcribed
scar-nois- AssignmenLl Part 1: Identify Security Flaws. Make sure that you have reviewed the practice activities and its solution before attempting this assignment. , you need to be able to make some sense of the code in order to try to identify possible weaknesses. 2. See the file SecurityChecijava (see below) and read through the code snippet. Identify two security weaknesses based on the security principles: your work should be like the attached example (see below) Secure the Weakest Link Defense in Depth Fail Securer Least Privilege Keep it Simple Secrets are Not Kept The Seltzer and Schroeder Principles (Complete Mediation andfor Separation of Privilege) Note the principle name (e.g. \"Secure the Weakest Link\") and a short description of the weakness with a screenshot of the piece of problematic code, for each weakness identied. Note that there are several possible answers to this assignment. Again you are not expected to be a Java programmer, but you are expected to read the code critically and learn to look for insecure programming patterns. Your explanation of why you identied an item is the most important thing I am looking for I want to see that you understand issues to look for in the code. Security Principle: Correcdy identied a secure coding principle and accurately noted how it was not applied in context oi the provided code snippet. Secu ritycheck2.java package com . dcx . ps . dcppcp . bm . dao; public class SecurityCheck2 { private static final String CLASS = "Securitycheckz"; l\" A Dcppcp constant that controlls messge output */ private final static boolean DEBUG = true; I\" A variable for maintaining a single reference for an error msg *r' private static String errorMsg; 2'\" A variable for maintaining a single reference for keys */ private static String keys; Ital: " This method writes debug statements when the constant is true. */ public static void debug(String s) { if {DEBUG} { System.out.println(s); } } /'k'k " This method writes debug statements and prints a stacktrace. */ private static void debug(String message,Exception e) { 1m

Step by Step Solution

There are 3 Steps involved in it

Step: 1

blur-text-image

Get Instant Access to Expert-Tailored Solutions

See step-by-step solutions with expert insights and AI powered tools for academic success

Step: 2

blur-text-image

Step: 3

blur-text-image

Ace Your Homework with AI

Get the answers you need in no time with our AI-driven, step-by-step assistance

Get Started

Recommended Textbook for

Modern Dental Assisting

Authors: Doni Bird, Debbie Robinson

13th Edition

978-0323624855, 0323624855

Students also viewed these Programming questions