Question

Assuming that we had to place our current Yoga Application into production, with the addition of the firewall we installed, identify THREE (3) significant and distinct areas for which our application and its environment is still vulnerable, and list some possible ways we would need to protect those vulnerabilities? Be sure to be specific, thorough, and use critical thinking. Imagine this is for your boss, and your job depends on it, but keep it limited to just three paragraphs. Each paragraph should clearly list a VULNERABILITY and at least one MITIGATION for each. Expected length: 3 well-formed but concise paragraphs.

Please I need help asap... Thanks!!!!!

Answer 1

Hi, I would like to answer you out with this question. I hope you will be getting a clear idea related the same . So lets head towards the answer.

Three different ares where the appication is still vulnerable with their mitigations are:

• DDOS on Web server - We assume that the Yoga application is a web application and here the web server may be vulnerable to the DDOS (Distributed Denial Of Service) attacks . As inside the DDOS the payloads are been coming from different ip and the firewall could not detect it at all and do not filters the incoming packet inside the network.

1. Mitigaton - Use of IDS and IPS should be three inside the network enabled

• Spoofing on the Email Server - The email spoofing is the type of social engineering attack which may be done at the users inside the network. This may be as the email may look like coming from a legitimate source asking for some crucial data and may lead to the leak in the privacy or security of the network.

1. Mitigation - Use of security protocols on the email server must be configured such as SPF and DMARC

• SQl injection on the database - This may lead to the envasion inside the database from the client side and from anywhere if the vulnerability is present  and the attacker migh dump the databse and get the full data of the particualar database just by using some commands.

1. Mitigation - Always filter the input from the user and do not accept special characters inside the input filed wherever not needed and filter the inputs with the character codes.

So these are three different aspects which may be vulnerable for the application .

Hope you like an answer , please like an answer and do comment for any queries.

Thanks and Happy to help :)

HAPPY LEARNING