Data Breach on Enterprise System - Malicious Insider Threats, Attack and Prevention Mechanisms

Shu, Lin Xun (2022) Data Breach on Enterprise System - Malicious Insider Threats, Attack and Prevention Mechanisms. Final Year Project (Bachelor), Tunku Abdul Rahman University College.

Text SHU LIN XUN_Fulltext.pdf Restricted to Registered users only Download (2MB)

Abstract

The main purpose of developing this project is to research different kinds of security threats that could threaten a system and security features while implementing them to the system to prevent data breach from happening on the system.This project is researched and developed by me and my teammate Yap Wei Liang. This project is supervised by our dear supervisor, Miss Lim Shen Huoy. The developed system consists of modules such as Login Module, User & Role Management Module, Edit Account Module and File Management Module. These modules contain some security features in them to help safeguard from data breach such as Multi Factor Authentication(MFA) in the Login Module, File Integrity Check in the File Management Module and User Authorization in the User & Role Management Module. The MFA can be enabled in the Edit Account Module to add more security to the account. The File Integrity Check is to help check whether the file content has been modified once it has been uploaded to the database. The User Authorization provides different privileges for the user using Roles created in the system to limit the accessibility to the resources. System Development Life Cycle (SDLC) has been used throughout the development of the project. For instance, requirements gathering, system design, system development, test and integration were done throughout the development of the project. This project has undergone a series of testing such as Unit Testing, Integration Testing and System Testing to ensure that the system has no errors and flaws and is able to perform its intended functions without issues. Overall the developed system works properly and is able to provide improved security features to the user. The strength of the system is it can provide a better security feature to help protect the user and the data inside the system and ensure data breach can not happen. The weakness of the system is it still needs further improvements to perfect the function within the system.