The most important features for businesses would be confidentiality, access control, integrity and availability. The few selected, were chosen because the nature of the business is an online magazine, also they were chosen because a good designer should be able to derive the others. It is also specified that the user will be asked to choose a username and password for which access control is mandatory. Confidentiality Confidentiality is essential for the online magazine because the same consideration given to the magazine must be given to the customer. From a customer's perspective, you don't want to sign up for a business where someone else, within the magazine or otherwise, can access your private information. For example: a customer has a friend who works at the magazine, suppose that friend (the employee) wanted to see what his friend (the customer) subscribes to? Not all employees should be entitled to such information. In fact no one should do this unless it is necessary. Therefore the journal policy should determine who has privileges over the information, which clearly shows how access control can be derived from confidentiality. From the magazine's perspective, if unauthorized access to information is allowed, be it customer information or editorial content, the company will cease to generate revenue because no one will be willing to risk subscribing knowing that their information will be collected and likely to be misused, for example if your email will be accessed and your inbox will be spammed or if the site itself is not secure and any hobbyist level programmer can write a script to secure himself and to others access to the contents of the site without having to pay, once again losses in reve...... middle of paper ......ml5Jhnri4, J. (2010, November 23). CAPTCHA 1 [CAPTCHA code that says "example only"]. Retrieved from http://openclipart.org/detail/97855/captcha-code-1-by-jhnri4[1] Rajnath,S.(Unknown).Distributed System Security [course handout].Diploma of Computer Engineering, University of Trinidad and Tobago, Couva[2] Enforcing strong passwords across the organization. (nd).Enforce strong passwords throughout your organization. Retrieved February 25, 2014, from http://technet.microsoft.com/en-us/library/cc875814.aspx[3]Udantha, M. (2010, May 26). CAPTCHA VS. reCAPTCHA. Retrieved September 27, 2014. Retrieved September 27, 2014, from http://madhukaudantha.blogspot.com/2010/05/captcha-vs-recaptcha.html5Jhnri4, J. (2010, November 23). CAPTCHA 1 [CAPTCHA code that says "example only"]. Retrieved from http://openclipart.org/detail/97855/captcha-code-1-by-jhnri4
tags