Design and develop a secure web-based system, incorporating end-point and communications security: secure programming, Coursework, SUSS, Singapore

Task:

Design and develop a secure web-based system, incorporating end-point and communications security, and ensure its security is rigorously tested. You are required to develop the system and report the steps taken, the report should not be more than 2000-words. The first part of the report should cover the literature review on the following areas:

Security within the software development lifecycle.
Secure software engineering.
Techniques for secure programming.
Standards based approaches such as OWASP, CERT, SANS, Certification, threat modelling and STRIDE.
Tools to aid secure software development.

When you do Programming you may consider the following steps:

• Code hardening techniques.
• Platform selection and development environments.
• Incorporating access control.
• Authentication and trust
• Language specific issues.
• Applied cryptography.
• Security protocols in programming.
• Mobile device software.
• Programming for offensive and defensive cyber.
• Current research in secure programming and future trends.
• Code analysis and testing: Code checking, static analysis, decompiling, dynamic analysis, sandboxing, runtime monitoring, fuzz testing.

Document your program in not more than 2000-word report showing all the steps taken in developing the system.