Loading...

Messages

Proposals

Stuck in your homework and missing deadline? Get urgent help in $10/Page with 24 hours deadline

Get Urgent Writing Help In Your Essays, Assignments, Homeworks, Dissertation, Thesis Or Coursework & Achieve A+ Grades.

Privacy Guaranteed - 100% Plagiarism Free Writing - Free Turnitin Report - Professional And Experienced Writers - 24/7 Online Support

vulnerable dependencies by using two different SCA tools “Snyk” and “Dependency-Check

14/10/2020 Client: trav2012 Deadline: 24 Hours

 My task for this assignment is to use two different SCA tools “Snyk” and “Dependency-Check” to find vulnerable dependencies in open-source projects. Each tool requires a different setup method that can be found in the online documentation of the tool. You are required to follow the instructions in the online documentation to set up the environment, perform a scan, and prepare reports in a useful format. The ability to use online documentation is part of this assessment.


Required Tools



  • Ubuntu Linux VM

  • Snyk

  • Dependency-Check


Part 1


For Part 1 of this assignment, you will be using Snyk to scan a customized ”Gemfile.lock” file (also attached below) that contains a list of modules used by an open-source Ruby application and identify vulnerable dependencies. Snyk is a security tool that enables you to find and fix known vulnerabilities in open-source software. Watch this video to learn more about Snyk:


https://youtu.be/4ng5usM6fd8



  • Create a free account with Snyk

  • Setup Snyk CLI on your Linux VM. For instructions, check the "CLI - Installation" page. 

  • Create a directory called “CYB505-Snyk” and copy ”Gemfile.lock” there.

  • Change to the newly created directory and run a test using Snyk CLI (refer to installation documentation for more details).

  • Login back to Snyk portal and observe the results. A new project should have been created by executing the test from the CLI. It will show you a summary of the findings. Clicking on the project name takes you to the finding details.

  • Summarize the findings in the format of a report. See the “Deliverables" section below.


 Part 2


For Part 2, you will be using Dependency-Check, which is an open-source SCA tool from OWASP.  You are required to install this tool on your Linux VM and run a test on another open-source tool from OWASP, Juice Shop.


To complete Part 2 of the assignment, follow the instructions:



  • Create a folder on your Linux VM called “CYB505-DC”.

  • Download OWASP Juice Shop (if you have not already done so for Discussion 7.1). Unzip and copy it to the newly created folder.

  • Download OWASP Dependency Check binaries zip file from the following link: https://bintray.com/jeremy-long/owasp/dependency-check under downloads.

  • Extract the zip file and look for the executable script called “dependency-check.sh” in the bin folder.

  • Run the scan and output the results into an HTML file. Use the command help option(“.\dependency-check -h”) for guidance. Hints: Check out -f and -o arguments and ensure that your command line is in the directory with the .sh file.

  • Summarize the findings in the report format. See the "Deliverables" section below.


Deliverables


Submit a zip file that contains the following three files:



  1. A single assessment report PDF file that contains findings from both scans. The report should include:



  • An executive summary that summarizes the findings for the upper-management audience using limited technical knowledge.

  • Findings

    • Vulnerability overview

    • Detailed dependencies paths

    • Risk rating

    • Remediation recommendations

    • Your analysis of the proposed remediation method, ONLY for “High” rated findings. I.e., if it is possible to do, what are the challenges, etc.



  • You are free to choose the report format and headings, but points are allocated for a professional-looking, industry-standard level report. The report should be readable and eye-catching, yet accurate and informative for the technical audience.


  • PDF export of the Snyk report

  • PDF export of the Dependency-Check HTML report.



Homework is Completed By:

Writer Writer Name Amount Client Comments & Rating
Instant Homework Helper

ONLINE

Instant Homework Helper

$36

She helped me in last minute in a very reasonable price. She is a lifesaver, I got A+ grade in my homework, I will surely hire her again for my next assignments, Thumbs Up!

Order & Get This Solution Within 3 Hours in $25/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 3 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 6 Hours in $20/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 6 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 12 Hours in $15/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 12 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

6 writers have sent their proposals to do this homework:

Finance Homework Help
Essay & Assignment Help
Accounting Homework Help
A Grade Exams
Helping Hand
Pro Writer
Writer Writer Name Offer Chat
Finance Homework Help

ONLINE

Finance Homework Help

I have a Master’s degree and experience of more than 5 years in this industry, I have worked on several similar projects of Research writing, Academic writing & Business writing and can deliver A+ quality writing even to Short Deadlines. I have successfully completed more than 2100+ projects on different websites for respective clients. I can generally write 10-15 pages daily. I am interested to hear more about the project and about the subject matter of the writing. I will deliver Premium quality work without Plagiarism at less price and time. Get quality work by awarding this project to me, I look forward to getting started for you as soon as possible. Thanks!

$70 Chat With Writer
Essay & Assignment Help

ONLINE

Essay & Assignment Help

I have a Master’s degree and experience of more than 5 years in this industry, I have worked on several similar projects of Research writing, Academic writing & Business writing and can deliver A+ quality writing even to Short Deadlines. I have successfully completed more than 2100+ projects on different websites for respective clients. I can generally write 10-15 pages daily. I am interested to hear more about the project and about the subject matter of the writing. I will deliver Premium quality work without Plagiarism at less price and time. Get quality work by awarding this project to me, I look forward to getting started for you as soon as possible. Thanks!

$70 Chat With Writer
Accounting Homework Help

ONLINE

Accounting Homework Help

I can help you with your homework & assignments to get A grade. I have helped several students multiple fields such as marketing, SWOT, PESTEL, Finance, Law, Sociology and Psychology. I know how to structure and format content with different writing styles such as MLA, APA, & Harvard. Please try me once at least. You will be satisfied.

$70 Chat With Writer
A Grade Exams

ONLINE

A Grade Exams

Hi, I have read the instructions carefully and I clearly understand what is required of the project. I always make sure I proofread and edit papers well to ensure they are free of typos, plagiarism, and grammar mistakes. Hire me for a timely delivery of a quality content.

$70 Chat With Writer
Helping Hand

ONLINE

Helping Hand

Hello, I an ranked top 10 freelancers in academic and contents writing. I can write and updated your personal statement with great quality and free of plagiarism as I am a master writer with 5 years experience in similar ps and research writing projects. Kindly send me more information about your project. You can award me any time as I am ready to start your project curiously. Waiting for your positive response. Thank you!

$70 Chat With Writer
Pro Writer

ONLINE

Pro Writer

Hello, I can assist you in every kind of writing. I am a professional academic/research writer and an MBA in business and finance. Please connect in chat session to further discuss the details.

$70 Chat With Writer

Let our expert academic writers to help you in achieving a+ grades in your homework, assignment, quiz or exam.

Similar Homework Questions

Practice management and ehr mcgraw hill - The _____ act criminalized securities fraud and toughened penalties for corporate fraud. - The sniper literary analysis - Emerson school of early learning mahwah nj - Two discussions - Johnson privilege power and difference chapter summaries - Wounded knee massacre primary source - Jean coutu income tax receipt - Virginia History - Reading passage case study tourism new zealand website - Mini paper on given topic - Correlation study worksheet psy 315 - The gilda stories chapter 2 summary - Country phone code 212 - Lab 4 - SQL Queries(DDL Create Tables) - Min q1 median q3 max - Median median line equation - Module 10 Quiz - Competition based pricing strategy coca cola - Example of an artifact that embodies ethical values - C spine precautions guidelines - Harpercollins trillion dollar coach pdf - Ghost of banquo quotes - Big Data Analysis of a company - Practical connection assignment - Engineering stress strain curve for copper - African american odyssey 6th edition pdf - Project pro cement mixer 74109 - Contextos leccion 7 answer key - 55a carter street cammeray - Caterpillar company structure - Disney theme park case study - Discussion - From pole to pole planet earth worksheet - Assignment - Mass spectrometer ib chemistry - Incremental analysis is most useful - Incremental analysis ppt - To explain behaviors and clarify cause and effect psychologists use - Consumer discretionary sector analysis - Every day edit basketball's beginnings - 1/2 wulworra avenue cremorne point - Brad naquin for district attorney facebook - How to identify vertical angles - Isometric perspective art definition - Discovering qualitative methods ethnography interviews documents and images - Lawson street medical practice - Film Genres Term Paper - Gesell developmental schedules pdf - What is ethics in criminal justice - Understanding yourself and others pdf - Research Project 1 - ARTICLE REVIEW DUE IN 3 HOURS!!! - What ice cream would you be and why - Tlmt 601 - Jabra pc suite download - Policy legal - Park management and conservation - Science and Engineering Practices and Science Process Skills Presentation - Nursing Theory Application Brochure - Book Review - Acssses control - Essay about Applications of Linear Regression in Engineering Technology - Soov bite gel side effects - Should cellphone be allowed in school essay - Customer satisfaction - Types of early childhood programs activity a chapter 2 - Strategic plan Development - Case Study 1: Part 1 Gulf Oil Spill - Linear algebra problems and solutions pdf - World Civilization before 1650. - BSWP Week 2 - Thermo king alarm 61 - Biology classification packet answer key - Student exploration titration gizmo answer key activity c - How to pronounce kurt vonnegut - Predictive validity ap psychology - Virtual museum - Literacy Toolkit 2: Reading and Writing - Zone 1 and 2 map melbourne - Sociological Research Discussion - Frimley a&e waiting time - Jay z 8 miles and runnin lyrics - Understanding case mix weight in home health - Budgeting - What does perma stand for - Research: Mastering Data Visualizations - CMIT 424 Week 1 Discussion(USE AS A GUIDE) - Toyota prius target market - PSY 7-1 - Barn owl food web - Is macconkey agar a defined or undefined medium - Ida sidha karya company is a family - Business and Economic Forecasting - Sinatra industries inc uses a job order cost system - Wilfred owen 1914 analysis - If an economy produces its most wanted goods but uses outdated production methods, it is - What is the endosymbiotic theory and what evidence supports it - End xldown offset 1 0 - Should students be allowed to use cell phones in school