Demonstrating Porous Defenses

In this homework you use AWS Cloud 9 to create two different unique demonstrations of Porous
Defenses such as Use of a Broken or Risky Cryptographic Algorithm, Improper Restriction of Excessive
Authentication Attempts, and Use of a One-Way Hash without a Salt.
You will provide unique code that contains the vulnerability and then provide an updated version of the
code that fixes the vulnerability. You should also describe why the original code was vulnerable and
discuss specific attack methods a user could try to exploit the vulnerability. Finally discuss how the new
code fixes the vulnerability.
Assignment Details
Be sure you have carefully read and understand the materials in weeks 7 and 8.

1. Select 2 CWE/SANS Top 25 vulnerabilities under the category of Porous Defenses from one of
   these specific issues:
   a. Use of a Broken or Risky Cryptographic Algorithm,
   b. Improper Restriction of Excessive Authentication Attempts, and
   c. Use of a One-Way Hash without a Salt
   Review and try the existing examples in links in the classroom. Use AWS Cloud 9 to experiment.
   Work in multiple languages where possible.
2. Using AWS Cloud 9, create your own unique example for each of the 2 vulnerabilities in this
   category.
3. Your code examples do not need to large or fully functional from an application standpoint.
   However; they need to include all of the code such that the vulnerability can be fully explained
   and corrected.
4. Use the information in the CWE/SANS Top 25 vulnerabilities to understand and experiment.
5. Be sure your documentation and descriptions are detailed and completed.
6. You may need to conduct additional research to better understand the vulnerability or the
   features associated with a specific language.
7. Document the vulnerabilities and describe specifically how the issues were corrected. Note: You
   may need to conduct additional research to better understand the vulnerability or the features
   associated with a specific language.
   Deliverables
   Provide all of your source files for this assignment along with your well-organized documentation
   (word of PDF file) supporting the files. Be sure to provide all documentation in one word or PDF
   document. You can compress the source files and documentation into a zip application for easier
   upload.

Sample Solution