Author: admin

Page 1 of 2
SECURITY ASSESSMENT REMEDIATION PROJECT ASSIGNMENT INSTRUCTIONS
OVERVIEW
In this project, you will build upon the earlier assignment paper (i.e., Security Assessment
Findings Project) where you reported upon the results of a web security assessment. In this
project, you will discuss recommended remediations and actions to address the vulnerabilities
reported upon in the earlier paper. You will therefore complete the remaining sections of the
assessment report that you started in the earlier project.
Inputs
• Security Assessment Findings Project paper (and the Web Application Assessment
template it is based upon)
• Lab report files from Labs 1-4 · Course textbooks
• OWASP ASVS website
• Other external resources as needed
INSTRUCTIONS
1. Review the OWASP ASVS assessment report document for familiarity.
2. For inclusion in section 2.1 of the previously completed Security Assessment Finding
Project paper, either draw a network diagram of the website architecture using the
information supplied in the overview of the previous assignment or write a paragraph
describing the infrastructure as listed in the Findings Project instructions. Include the
major components (i.e., routers, firewalls, web servers, IDS, storage) in either case. For
drawing a network diagram, you can use the tool of your choice – such as using the
draw.io web site.
3. Revise the references in section 1.1 of the template to add three (3) additional references
for a total of six (6) references.
4. Complete template using step 5 below in the remediation template “Web Application
Security Report Template” associated with this assignment that you used in the Security
Assessment Findings Project. You can optionally use your own document organization as
long as you include all of the elements below.
5. Complete the remaining sections of the template used in the Findings Project not
included in the previous assessment report:
a. Section 2 – Web Application Descriiption
i. Insert diagram or infrastructure descriiption in section 2.1 from step 2
ii. Briefly describe the purpose in two (2) or more sentences for each of the
website application architecture components in section 2.2 and its
subsections.
b. Section 6 – Recommended Remediation Actions
i. For each of the subsections 6.1 – 6.5, list in the table the recommended
remediation priority (high, medium, low) and estimated remediation effort
(high, medium, low) for that item. Do this for at least three (3) of the high
priority items in that section. These estimates are your own CSCI 631
Page 2 of 2 priorities based upon the web vulnerability severity and your
best estimate to resolve.
CSCI 631
Page 2 of 2
ii. For each recommendation, list a brief descriiption of the remediation based
upon your research on the OWASP web site (or other Internet sources).
iii. For section 6.5, provide general recommendations based upon your
readings as to best practices in web application design.
iv. For section 6.6, describe in one or more paragraphs how your
recommendations are consistent with biblical principles.
Outputs
In this paper you are to write additional content in the report template associated with this
assignment. There is no specific page limit- but the final deliverable for this project will likely be
20 or more pages due to the length of the report template. It must be in current APA format as
well. In addition, it must include at least 3 additional references for a total of 6 references
(includes 3 from the earlier project) not counting the course textbook and the Bible. Modify
sections previously written in the earlier project as appropriate to make the final paper cohesive
as needed. Be sure to repaginate the table of contents and remove any instructions highlighted in
red from the template.
Note: Your assignment will be checked for originality via the Turnitin plagiarism tool.