Threats to Quality Web Designs Network System (QWD)

Threats to Quality Web functions Net subject field system (QWD)Executive SummaryThe main purpose of this report is to existent the effectiveness auspices threats that aspects Quality Web Designs network system (QWD). QWD specializes in netsite and net content shape for dissimilar types of business and all type of auspices threat depose signifi smoketly disturb its business operations. It is significant to put out any potential vulnerabilities, assess potential threats, and the potentials of the threat happening. It is also brisk to calculate what might happen to the business process and competitive acuity of the corporation if the threat occurs. Two security vulnerabilities in both QWD security policies and softwargon be deliberated in the report. Fin ally, we discuss the impact the security modifications break on the business process.Company OverviewQuality Web Design (QWD) is an lay down that focusses in the Web site and Web content design for all different types o f businesses. QWDs assignment is to deliver best quality Web design that will increase consumer income to QWDs customer Web sites. QWDs infobase comprises over 250,000 branded images and graphic designs that will improve most Web sites demand to a conclusion demographic. QWD is able to offer its clients the capability to offer their audience a customized interface. sputum lot of consistent services were delivered by Quality web Design Company to their customers in such(prenominal) a way that there wont be any security problems in the organization anymore. There were some(prenominal) limitations to every ph geniusr and Quality web Design can chasten them. QWD superiorities itself in having their own web designers that social function ritual scripts and applications. This sets the gild aside from other competition. The keep company operates Microsoft Visual studio apartment Team Foundation supporter server to promise constant development of the site from start to end. The c ompany also has its own payroll, marketing, and storeying departments which are significant to the business operations. bail VulnerabilitiesSecurity Policy VulnerabilityQWDs security policy does non sermon the topic of employees using company equipment such as the IPhones, Windows cell phones, and laptops for in-person use. This should be lectured in an Acceptable Use Policy. By the company not making a policy, only for the company use only they are making the equipment, it grasses the company vulnerable to open occurrences. It is not impracticable to descry that employees do use company delivered equipment for face-to-face use. Employees usage the blinds to send and obtain private emails through non-related company sites such as Gmail, Hotmail, and Yahoo. They use the company devices to surf the web, shop for items, play games, download applications, get on cordial networks such as Myspace, Facebook, and Twitter, watch videos, and even listen to music. According to one sit e on employee internet use, employees spend about one-third of their prison term on the cyberspace for personal reasons. (Employee profits Use) This means that out of a regular 40 hour work week, employees are spending 13.33 hours doing personal earnings usage. This also relates to employees who offer their bustling morsels for personal use on the Internet. Some eras sites need registration and things such as pass on phone human activitys must be included, Unfortunately, for some employees, the only number they hold up to use is the company issued mobile phone. It means that the employee is given that the company mobile phone as their point of contact number.This type of exposure delivers the prospect of pressures beside the company by not having a policy in place. The threat that can arise is if an employee downloads a virus, malware, or Trojan to their mobile phone, laptop, and even desktop. This is especially so for the remote devices be guinea pig when these are connec ted to the commute server, it can infect the corporate network. If an employee is using their desktop to surf the Internet for private usage and they open an email sent by a contact that has a virus attached, it can infect the network. Another usage is if an employee registers for something personal online, such as sweepstakes, this can be a problem. If a hacker gets a hold of the information, the hacker could send a schoolbook message that has instructions to download something that contains a virus. If an employee is under the guess that they have won something that they know they signed up for, many will not hesitate to download the link.Since devices such as mobile phones and laptops are utilize more lots off site by employees, providing them more time to use for their personal use, it makes the risk highly likely. If statistics suggest that employees are on the Internet one-third of the time for private use at work, it would come along to be a lot higher when employees ar e at home(a) or not at work. This means they are checking emails more often and downloading content which could be infected. They could even let family members and friends use their devices to glide path the Internet.Employee Internet Use editorial also conditions that over $85 billion is vanished apiece year by companies because employees are using company time to access the Internet for personal use. If anything the employee has downloaded and allowed to infect the company network, it is safe to say that number goes up. If infections are passed onto the network, it could halt business processes. In order to fix the problem, it would cause the company time and money. The company also has to try and assess how oft and what type of damage was caused by the attack. It could also keep employees from accessing necessary applications, emails, and work on time sensitive projects.Software VulnerabilityAgreeing to Microsoft Visual Studio (2008), the Team Foundations Server (TFS) is a so ftware implement that offers project arrangement abilities, recording, work stalking, and source control. Team foundations server also holds a data storage warehouse where all data from testing implements, source control, and item track are stored. QWD customs TFS in its business routes as a warehouse of custom applications, procedural written scripts, and web site templates. The TFS warehouse contains a database code source, an application server, and a web server. QWDs TFS server is placed at their corporate occasion, though it can also be opened distantly by Internet Protocol Security (IPSec) tunnel connecting the corporate office to the database server.TFS has a cross-site scripting (XSS) picture that whitethorn give an unofficial remote assaulter admission to an application (Cisco, n.d.). XSS is in the list of the top 10 web application vulnerabilities and signifies 26 percent of assaults from a review done by the Open Web Application Security Project (Nithya, Pandian, M alarvizhi, 2015). The vulnerability is a result of not sufficient confirmation on user-supplied input in constraints referred to the overstated application. A remote attacker who has not been authenticated may use the vulnerability to convince a QWD user to follow a malicious link that leads to a malicious site and use tawdry instructions to convince the user to click the link. If the remote attacker is successful, they can execute cross-site scripting attacks and can motive severe security damages such as cookie hold up and account hijacking (Shar Tan, 2012).The vulnerability will result in insignificances to assignment serious business map since the attacker can increase access to QWDs intranet, Microsoft Share Point, the web server, and cookie-based validation. The aggressor can delete or alter QWD website patterns and custom written scripts that are deposited on the server.In addition, QWDs competitive advantage will be exaggerated by the damage of integrity, loss of key cus tomers and associates. Reserved data can be sold to competitors making QWD suffer losses and bear the monetary value of repair.SummaryIn any organization, the corporation must take into description any security matters that can offend the company, employees, and its customers. QWD must take into account the vulnerabilities related to its technological procedure and how it can mark the business. It is main to locution at the software and security policy vulnerabilities and how to defend the company from any probable pressures and threats. It is supposed that by addressing the satisfactory use policy of company equipment for private use and the wireless access points of company laptops, this can promote in keeping the company network more secure.ReferencesClancy, Heather. (2011). winding device security strategies. Retrieved on butt against 21, 2012, from http//searchnetworkingchannel.techtarget.com/feature/Mobile-device-security-strategiesDefending Cell Phones and PDAs Against good time (2006 August 9). Retrieved on March 21, 2012, from http//www.us-cert.gov/cas/tips/ST06-007.htmlElliott, Christopher. (2011) Retrieved on April 10, 2012, from http//www.microsoft.com/business/en-us/resources/technology/broadband-mobility/6-wireless-threats-to-your-business.aspx?fbid=Hsna4GJxWrgEmployee Internet Use. Retrieved on March 29, 2012, from http//www.connections-usa.com/employee-internet-usage.htmlEvil Twin. Retrieved on April 4, 2012, from http//searchsecurity.techtarget.com/definition/evil-twinHotspot enjoyment to Reach 120 Billion Connects by 2015, Says In-Stat (2011 August 29). Retrieved on March 29, 2012, from http//www.prweb.com/releases/2011/8/prweb8751194.htmMiFi 4082 Intelligent Mobile Hotspot. Retrieved from http//www.novatelwireless.com/index.php?option=com_contentview=articleid=276mifir-4082-intelligent-mobile-hotspotcatid=19mifiItemid=12Mobile Broadband Cards. Retrieved on April 10, 2012, fromhttp//www.todayswirelessworld.com/mobile-broadband-cards/ Mobile Broadband Cards