Web Security Solution

Securing information over the internet has become one of the biggest challenges in the present day. Whenever we think about information over the internet the first thing that comes to our mind is cybercrimes which are increasing immensely day by day. Despite significant innovations in cybersecurity

Project Title

Web Security Solution

Project Area of Specialization

Cyber Security

Project Summary

Securing information over the internet has become one of the biggest challenges in the present day. Whenever we think about information over the internet the first thing that comes to our mind is cybercrimes which are increasing immensely day by day. Despite significant innovations in cybersecurity products and research over the years, this field is still immature and struggling. Where data security is a great challenge, we not only require a mechanism for detection of these threats but it is a central debate on how to respond to these cyber intrusions. One challenge here is to identify who is behind a cyber intrusion and then there is a great challenge of finding adequate policy response. In this digital world, businesses are open to attack; our focus is not only to provide a mechanism for detection and prevention of data and sensitive information from these cyber-attacks but also to give a powerful strategy that will help in diverting the cyber-attacks and apply the best policy responses to protect information.

Project Objectives

Security is important in web applications because without having a proactive security approach, your organization is at risk of the spread and escalation of malware attacks and other attacks on networks, websites, and IT infrastructures. Main objectives of this project our:

• To create a new paradigm for the next generation web-security systems
• To quickly detect and effectively respond to/mitigate sophisticated  malware attacks by advancing the current state-of-the-art of numerous existing techniques and by introducing new ones
• To deliver advanced and intense threat defense solutions for collecting information from the defending systems in order to identify the attackers and further use it as evidence in court.
• To minimize the impact on sensitive data protection and user’s privacy of the proposed tools and methods.
• To provide a highly secure system that ensures the confidentiality of data

Project Implementation Method

We are going to implement ten modules of this security solutions which includes:

End Point Firewall

We are implementing a endpoint firewall along with 7G
Blacklisting Rules.

Backup Mechanism

We will provide a Z scheme backup along with level backup approach along with encryption technique to keep files safe.

Fake Environment

We wants to provide with a complete malware honeypot
that will attract the intruders towards it in order to protect actual system.

Two Factor Authentication

We wants to provide with a 2FA solution which will be knowledge base, each user will be provided with unique secret questions. User will able to set its secret question and
can enter answer for further logins and will be able to change its question periodically. Furthermore for security concern will use encryption for user input. We will also enforce strong password and enable limit on login attempts to prevent brute force attacks.

Notification

We wants to provide an email based notification method that will collect data from daily scans, firewall activities and fake environment and inform the client about all activities happening on site.

Live Traffic 

We wants to provide a live traffic analyzer by collaborating with google analyzer that will give a complete insight of live traffic on website in real time.

Malware Scanner

We wants to provide a malware scanner that will scan for each file of website and compare it with last update present in repository to look for any issues according to specified rules.

Blocking and Blacklisting

We wants to provide a blocking mechanism that will block the malicious attacks by using a multitier approach that will provide different levels of blacklisting and blocking users.

File Repair 

We wants to provide a file repairing method that will use backup as base, it will scan system files for changings and compare them with the last update backup copy. If any malicious patterns will be present it will restore the last updated backup copy in order to remove malicious content.

Brute Force Protection

We will implement a login lockdown mechanism that will block the user after  certain limit of failed login attempts.

Benefits of the Project

All web users including Organizations, Companies, Individuals and online business owners, etc. will get benefits as this project will provide such a solution that will be able to protect the CMS platform with the best security mechanism. It includes a full suite of tools to protect against malware infections, data breaches, and service disruptions. Our focus is to provide a security solution that will help to protect and detect malicious attacks. It will include a Endpoint Firewall that will protect the originated server where your site will reside, a Malware Scanner that will check core files and database to ensure no malware resides in website, a Two Factor Authentication that will make it sure that only authorized users access accounts, a Blocking and Blacklisting technique that will block or blacklist intruders, a Backup Mechanism so your data stays safe if anything goes wrong, a Fake Environment to trap intruders, a File Repair Mechanism to repair damaged files from attack, a Real-time live traffic Analysis so you could better understand your users, a Brute force attack prevention and protection mechanism for locking down the black-hats and Notifications regarding any activity happening on website so you will stay up-to-date.

Technical Details of Final Deliverable

The final deliverable product will be a complete web security solution that will ensure the security with efficient techniques. It will provide detection, prevention and protection for a web system against any kind of cyber attack. It will have a 7G endpoint firewall, malware scanner with seed block algorithm, Z-scheme backup mechanism, a multitier blacklisting mechanism, statcounter analytics for live traffic analysis, cloud google based notification mechanism, knowledge based two factor authentication, honeypots for trapping hackers and a file repair system that will be based on backup comparison technique.

Final Deliverable of the Project

Software System

Core Industry

Security

Other Industries

Education , IT , Legal , Others

Core Technology

Others

Other Technologies

Internet of Things (IoT), Big Data

Sustainable Development Goals

Industry, Innovation and Infrastructure, Partnerships to achieve the Goal

Required Resources

If you need this project, please contact me on contact@adikhanofficial.com