User Account

All Pages

Determining the finding and fixing vulnerabilities

Assignment Help Basic Computer Science
Reference no: EM13926577

Because modern applications are complex, it is not practical to think about finding and fixing vulnerabilities by simply inspecting the code. Instead, a wide variety of sources-ranging from the government and professional software developers to the hacker community-provide information about potential application vulnerabilities. That information is reported from all of those sources to automated bug-tracking services like Bugzilla and it can be used to guide the application development and maintenance process.

Thus, the CISO has asked you to use Bugzilla to identify and guide the patching of the Firefox application for your company.

Go to Bugzilla and search for "injection." Sort the list by severity. Take a screenshot of your search.

Select one vulnerability of your choice from your result lists and write a 2- to 3-page paper in which you use the information provided for that vulnerability to analyze the specific problem and its causes. Then evaluate the recommended mitigations Bugzilla suggests. (Hint: you will find these by clicking on the ID number in the far left column.)

Your evaluation should address the following questions:

  • What are the severity and priority rankings for your chosen vulnerability?
  • What are the code level concerns for the vulnerability?
  • What security issues will this vulnerability raise for the application?
  • What are the precise steps required to fix the vulnerability you selected?
  • How effective are the recommended mitigations for this vulnerability? (You may need to conduct some research to answer this question.)
  • What other mitigations would you recommend? Why?
  • Why should you, as a developer, and your organization be concerned about fixing this vulnerability?

Remember to include the screenshot of your Bugzilla search as appendices to your paper.

Reference no: EM13926577

Questions Cloud

Was it a consensual or adversarial argument : Think about a recent argument you had. Identify when you argued, the issue, with whom you argued, and what you were trying to accomplish with the argument. Was it a consensual or adversarial argument? Was this argument typical of your argument sty..
Conditions and requirements of application security : This seminal publication outlines a set of basic principles that define a logical way to classify and respond to threat. It also describes the critical things you should consider while building software. These underlying principles dictate the con..
Who benefits from a tariff or quota : How do protectionist trade policies affect a government's wealth and fiscal policy?
What price must chrysler charge in japan in yen : If the exchange rate of Japanese yen for U.S. dollars is ¥140 ¼ $1, what price must Chrysler charge in Japan (in yen)? What price will Chrysler have to charge in Japan if the value of the dollar falls to 120 yen?
Determining the finding and fixing vulnerabilities : Because modern applications are complex, it is not practical to think about finding and fixing vulnerabilities by simply inspecting the code. Instead, a wide variety of sources-ranging from the government and professional software developers to th..
Why was this movie one of your favorites : Think of one of your favorite movies (past or present). Respond to the following questions: Why was this movie one of your favorites? What about this movie inspired, educated, or motivated you
Situations affecting the demand curve for ipods : Evaluate how the following situations will affect the demand curve for iPods.(a) Income statistics show that income of 18-25-year-olds have increased by 10 percent over the last year.
Sets of data and explore ways of analyzing : In Chapter, we are going to look at sets of data and explore ways of analyzing that data so that conclusions can be made from that data. Now, it is possible to have a data set that has many as 100 data points or even 1000's of data points.
What is the effect of a trade surplus : How do trade deficits and surpluses affect the industry in which you work?

Reviews

Write a Review

Basic Computer Science Questions & Answers

  Wireless mac protocols use csma/ca

Why do Wireless MAC protocols use CSMA/CA and not CSMA/CD? Explain why Wireless link layer protocols use acknowledgments whereas Wired ones typically do not.

  The shuffled deck should be represented by a two-dimensional

Write a small program that will read in 52 cards from a file, shuffle the cards, print the unshuffled deck to the screen, and print the shuffled deck into new file.The unshuffled deck of cards should be represented in the program by three-dimensional..

  Poductive discussion on your findings related to the human

At the next meeting, you and the team had a very productive discussion on your findings related to the human resource planning and related team management processes. Everyone feels that it is time to present your findings to Sam and Gloria.

  The functions square and double take a single int parameter

The functions square and double take a single int parameter and return an int result.The function compute takes a value n and a function f, and returns the result of calling that function f with n as its parameter.So, compute(3,square) evaluate..

  Which of two alternatives you should pursue

The WBS identifies all of the work that must be done to complete the project

  Building successful information systems

Building successful information systems, Management support systems

  Software development life cycle

Literature Review - 3-4 pages Take the paper to next level. Identify about 15 scholarly articles using VIU library resources as related to your topic, extract information as needed and blend the content into your paper with suitable sections

  Contains an unknown number of lines

A file named data.txt contains an unknown number of lines, each consisting of a single integer. Write some code that creates two files, dataplus.txt and dataminus.txt, and copies all the lines of data1.txt that have positive integers to dataplus.txt,..

  Mathematical equations using latex

To typeset documents that include titles, sections, lists, emphasis, verbatim environments, footnotes, tables of contents, and mathematical equations using LATEX

  Significance and benefit of having different classes

significance and benefit of having different classes of networks?

  Parallel processing effectiveness

Parallel processing effectiveness Consider two versions of the task graph in Fig. Version U corresponds to each node requiring unit computation time. Version E/O corresponds to each odd-numbered node being unit-time and each even-numbered node tak..

  Led paybyphone to switch to an ip-based network

What are the reasons that led PayByPhone to switch to an IP-based network?

Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

Submit Assignment

Academics

Major Subjects

Majors

Get In Touch

whatsapp: +1-415-670-9521

Phone: +1-415-670-9521

Email: [email protected]

TERMS & POLICIES

HELP & SUPPORT

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd