SEC 571 Week 2 Course Project; Organization Profile and Problem Statement

SEC571 Week 2 Organization Profile and Problem Statement Student Name DateRubric Criteria Total Selection of Organization 10 Identification of products and services 10 Analysis of potential improvements 10 Problem statement 15 Total 45 Netflix, created by Reed Hastings and Marc Randolph in Scotts Valley, California, is a subscription-based streaming service. Customers can watch TV and movies commercial-free on an internet-connected device. Founded August 29, 1997 renting and selling DVDs through mail from Netflix. After a year, they focused on rentals instead of sales. May 29, 2002, went public at $15 per share. The share price is $445 today. TV series and movies may now be downloaded to iOS, Android, and Windows 10 devices for offline viewing. Movies Television shows Original series Documentaries Feature films Electronic games Hidden genre category list system Smart download feature DVD by mail service Next Games Streaming Media Video on demand Film production Film distribution Television production SECURITY VULNERABILITIES Putting in bad SQL code to get unauthorized access to information like secret company data, user lists, or private customer information. Without proper removal or quoting of SQL syntax in user-controllable inputs, the changed query logic could escape security checks or add extra statements that change the back-end database, possibly by running system commands. Failure or improper neutralization of user-controlled input before it is put into output that is used as a web page that is served to other users. In many cases, the attack can start before the target even knows what's happening. Even when users are careful, attackers often use methods like URL encoding or Unicode to hide the bad part of the attack so that the request doesn't look as strange (CWE Team, 2022). Once the attacker has inserted the malicious script, they can do a number of bad things, such as: Send confidential information Send fraudulent requests to a website on the victim's behalf Phishing tactics could be used to make sites look like ones that people trust. The script could take advantage of a weakness in an online browser and take over the victim's computer. This is called “drive-by hacking.” THREAT ANALYSIS Cybercriminals try to get private information like usernames, passwords, and credit card numbers by pretending to be a reliable source or person and communicating digitally. This threat comes from both inside and outside the organization. Phis