546a5

Case Project 7-1: Determining Software Engineering Risks for Alexander Rocco After reviewing all the applications Alexander Rocco uses, you notice that many have been modified or changed during the past couple of months. Two of the company’s financial applications are written in C and , according to Randy Stegner, the IT security administrator, monitor the company’s accounts and financial data.Mr.Stegner discovered that several modifications weremade to one program, with no documentation indicating who made the changes or why. Based on this information, write a memo to Mr. Stegner with your findings and any recommendations you might havefor improving the security of the company’s software engineering practices. Search the internet for any information on securing company software. Does the OSSTMM address any of these issues? What improvements would you recommend to better protect this information?

Case Project 7-2: Developing a Security – Testing Tool Your manager at security consulting company has asked you to develop a tool that can gather information from several hundred computers running Windows at Alexander Rocco. The tool needs to verify whether any computers are left running at certain hours in the evening, because management has requested that all computers be turned off no later that 6:00 p.m. Write a memo to your supervisor describing the programming language you would use to develop this tool and the method for verifying the information Alexander Rocco management requested.