Secure software development concepts support protecting applications

Article 1:

Question: Much has been made of the new Web 2.0 phenomenon, including social networking sites and user-created mash-ups. How does Web 2.0 change security for the Internet? How do secure software development concepts support protecting applications?

World Wide Web (www) has advanced as a major technology since its introduction during the 1980s. In beginning web sites were primarily used only by few number of users to share information related to their academic work. As the user interface evolved over the next coming years with each new version bringing in new frameworks and techniques, it powered web as a hub of technology. Web 1.0, 2.0 and 3.0 brought more dynamic features to the users. Web 1.0 used to describe the web content in static resulting in rigid user experience. Web 2.0 which powered social networking sites became popular developing the web which ultimately served as a platform for people to create and share their own content on the web in the form of blogs, wikis, feeds, tagging systems, user-created publication systems etc. The evolution of web technology began to spread its roots into the major business areas which brought in the requirement for high speed and expanded availability for substantial number of users.

On the other hand, Web 2.0 has also brought some security’s concerns. Mainly the component of client interaction with web, it opened doors to unauthorized actions in the application. In order to provide a rich user experience majority Web 2.0 sites have adopted lightweight user interface code such as asynchronous JavaScript and XML (AJAX). In the Conventional client-server models, many of calls (requests) are handled and processed on the server side. AJAX allows a higher percentage of requests to be processed on the client side. This may give malicious users many options to modify any application code running on a client machine by exploring and testing the application for vulnerabilities.

To overcome this objective, developers should consider installing an appliance at the Internet gateway, which performs real-time code inspection of traffic flowing through the corporate network. High performance and high availability appliances capable of monitoring and acting swiftly to block any suspicious web traffic are paramount. Also, it is very important that developers develop the application with security in mind. Following the coding convention, having the code reviewed, testing the application thoroughly are all part of securing the application in the web.

Article 2:

Question: Much has been made of the new Web 2.0 phenomenon, including social networking sites and user-created mash-ups. How does Web 2.0 change security for the Internet? How do secure software development concepts support protecting applications?

Web applications, or software as a service (SaaS) Web applications, has certainly revolutionized the way individuals utilize the net. Advancement as advanced and as more people have started to utilize the Internet, the net has experienced through predominant turns specially Web2.0, Web 3.0 and Internet of things. Example customer-facing applications, it has ended up exceptionally troublesome with recently presented security threats. Such applications can effortlessly enter through the conventional security measures taken and enable the programmers to break classified data.

How web 2.0 change securities for internet:

Web 2.0 capabilities serve 2 main purposes 1) to reach the public straightforward manner referred to as social media and 2) to improve the business process. They are progressively utilized by companies for superior staff collaboration and communication. Web 2.0 innovation offers numerous preferences in terms of enhancing the Web and making strides the client involvement, they are too bringing a number of security concerns and assault vectors into presence. Since one characteristic for a web2.0 application is to emerge more noteworthy client association, the presentational the person or client to security threats and vulnerabilities increases.

The following are few security issues of Web 2.0 Environment. They are:

Insufficient Authentication Controls:

In numerous Web 2.0 applications, content is confined within the hands of numerous different clients, not only a select number of affirmed clients. That implies there's a more noticeable possibility that a less-experienced client will roll out an improvement that will adversely influence the general framework.

Cross Site Scripting (XSS):

In a stored cross-site scripting (XSS) vulnerability, malevolent info sent by a hacker is put away in the framework at that point, then showed to different users. Frameworks that enable clients to include arranged substance – like HTML for instance – are particularly defenseless to this assault

Phishing:

In spite of the fact that phishing isn't only a hazard related with Web 2.0 applications using any and all means, the huge number of unique client programming being used makes it harder for users to recognize the honest to goodness and the phony sites. That empowers more viable phishing assaults.

Information Leakage and Integrity:

Data Integrity is one of the key components of information security. In spite of the fact that a hack could prompt loss of respectability, so can unexpected falsehood. An incredible case of this in the general population field is a mixed up alter on Wikipedia which is then acknowledged as truth by a considerable lot of the site's guests. In a business domain, having frameworks open to numerous clients permits a vindictive or mixed up client or clients to post and distribute incorrect data which crushes the respectability of the information.

Despite many security issues, I would use Web2.0 because Web 2.0 is a people-oriented technology. Convenience, social highlights, joint effort, quick stacking applications, intelligence, snappy advancement times and continuous updates are on the whole real patterns. Rather than a million highlights stuffed into one costly programming program, you get littler, sleeker online applications that mean to do only a couple of things extremely well.

Article 3:

Question:

1. Develop a product service idea.

A. Describe the product/service including the benefits of using the product/service

B. Discuss the potential customers for this product/service

2. Based on the nature of the product/service, recommend at least 3 possible ways to market the product electronically. Your suggestions must include at least one search engine. Describe your recommendations and discuss the advantages and disadvantages of each.

While developing a new product its uniqueness should be different from others so that it can survive in the competitive world. Its features must be different and understandable so that it can be preferred by everyone easily. Further these features must provide benefits which can attract more customers by using strategies in marketing. This way we can increase sales and also profits. Based on the benefits only customers prefer your product so they must be easy to use, safe and affordable. Further purpose of the product must be easily understood by consumers. Based on products features we can find potential customers. For example say when painting your building you may chose to paint professionals or laborer to paint. But each one’s work is different to each other. While describing your product to customers, say about its benefits and qualities which will make them interest in the product. For example if the product is about athletic gear focus on durability, comfort and design of the product. We can share the social responsibility by creating the product eco friendly and attract more customers.

Social media sites are better platform for interacting with customers. It also helps in building brand among customers daily. By answering their questions and sharing, will helps in building product image and forms loyal group of customers. It has also drawbacks like problem related to customer service may change violent on facebook and twitter and this causes trolls to harass employee and consumers because of inappropriate posts on website. So organizations have to resolve these conflicts sometimes (Basu, 2017).

Web marketing: this is another strategy for advertising which involves search engine marketing, email marketing, social media marketing, and banner advertising which are done through online. Currently pay per click marketing, SEM is best and evolving quickly in business organizations for advertising.

Consumer Review Networks: with this, consumers can find any product reviews, services and information about brands etc. these reviews will add more value to products in websites. Through this reviews organizations can build up their product value.

Article 4:

Question:

1. Develop a product service idea.

A. Describe the product/service including the benefits of using the product/service

B. Discuss the potential customers for this product/service

2. Based on the nature of the product/service, recommend at least 3 possible ways to market the product electronically. Your suggestions must include at least one search engine. Describe your recommendations and discuss the advantages and disadvantages of each.

This is a service of delivering cargo, especially small-sized goods what do not weigh much by drones. This will require the manufacture of programmed drones, which will use GPS to take route and travel from the point of order to the point of delivery. This will make the process of delivery of small packages fast and efficient, with the recipient receiving his cargo on time. Use of the drones will be more economical as it will save on time and money. No manpower will be required, where the time spent by delivery-persons can be taken, and the individuals find other things to do. Nonetheless, use of drones is a way of improving lifestyle.

Any products will be delivered using drones, especially in urban areas. Therefore, the drones can be used in transferring retail products between sellers and consumers. For instance, vendors of fast foods can be sending lunch boxes to individuals who may have ordered online, right in the places where they are. Therefore, every individual is fit to use the service so long as s/he may wish to transport items without necessarily traveling. The drones will, however, be limited to lifting the weight.

Use of drones in the delivery of cargo is much more economical and environmentally friendly as no burning of fuel is involved and thus, no release of carbon dioxide into the air. The drones use electric energy, which sometimes can be gotten from natural sources such as solar and wind. Among how this service can be marketed electronically include using advertisement though ads on websites, search engines, and phone applications (Gabbai, 2017; Zhang, 2017). The other possible way is through using a tell-a-friend-to-tell-a-friend, initiative after that the service being introduced, the first individuals to use it will recommend their friends using social media such as Facebook, Instagram, among others. The third way is through creating a commercial website and optimizing it using Google search engine, such that upon a customer looking up for such as service, it be popping up atop the list (Gabbai, 2017; Zhang, 2017). One basic disadvantage is that the drones may face obstacles, and they can travel limited ranges of distances. Use of this service will mean joblessness to delivery-person.