Authentication and Authorization of Private and Confidential Data

Wong, Kei Fung (2019) Authentication and Authorization of Private and Confidential Data. Final Year Project (Bachelor), Tunku Abdul Rahman University College.

Text Wong Kei Fung_Full text.pdf Restricted to Registered users only Download (4MB)

Abstract

In order to access to the private and confidential data from the website’s database, authentication and authorization is an important process to ensure that the sensitive data of the website is only able to view by the authorized personnel and preventing improper modification and destruction of the confidential data of the website. One of the main reasons of some websites are suffering from disclosure of the confidential data from their websites are the insufficient of security protection towards the confidential data from the non-authorized personnel. For example, that some website only builds with basic login function that restrict from user outside the website, but the user that owns an account from the website is able to login and some confidential data are not restricted from them and they are able to access due to no restriction regarding accessibility to the data. The main purpose of this project is to enhance the security features of the website to preserving the authorized restriction on access and disclosure of the confidential data of the website. The proposed scope of this project is looking through various methods to implement security features towards the website and minimizing the risk of the confidential data being access and perform modification in an improper manner.