[SOLVED] Csc8015 case study 2- web-application security

Submit your completed answer to the questions via NESS, as a pdf document.

Instructions
Answer ALL questions
This assessment contributes 100% towards the total mark for this module. It is an individual exercise: no group work is required for the assessment.
In particular, be careful to cite properly bibliographic references. You can of course discuss your work with other students, but the work you submit must be individual.
[Turn Over]
Question 1 – Videos of attack demonstrations (40%) Learning Objective of the assessment
As a security analyst, you must able to conduct concrete attacks on the system you are analysing, to test if some vulnerabilities are present or not. You must be able to use the relevant security tools and to develop the adversarial mindset (i.e., thinking as an attacker).

Instructions
Guidance on how to record your screen is provided on Canvas.
Only a link to the video will be accepted, please do not send us a video file.

– Marking criteria for the video demonstrations.

Question 2 – Security Analysis Methods (60%) Learning Objective of the assessment
As a security analyst, you must be able to design and justify an analysis strategy when considering a system, before actually conducting the attack. You must consider ethical and professional aspects and assess the potential effectiveness of the tools they want to use for a specific context.
Instructions

Marking criteria for the analysis methods.
Each report is marked individually, following a marking scheme divided in the following categories:

Case study 1- Network Security
Building and the Urban Observatory.
https://3d.usb.urbanobservatory.ac.uk
Describe a method to analyse the security of this network of sensors.

Case study 2: Web-application Security
Describe a method to analyse the security of this server.