Strategic Analytics

IT Audit: Security Beyond the Checklist
This paper is from the SANS IT Audit site. Reposting is not permited with knocked out(p) express written permission.

Copyright SANS Institute Author Retains abundant Rights

Interested in learning more?
Check out the list of upcoming events offering IT Security Audit and curb Essentials (Audit 410) at http://it-audit.sans.orghttp://it-audit.sans.org/events/

Audit Report

Collaborative Research System
fu ll r igh ts.
Submitted By
Author retains full rights.

Web Application Security Audit

lynchpin fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 December 15, 2004

© SANS Institute 2004,

©

SA

NS

In

sti

tu

As part of GIAC possible repository.

te

20

04

Dan Aiken, GSEC

,A

ut

ho

rr

GSNA Practical Assignment, Version 3.2, Option 1

eta

ins

COLLABORATIVE RESEARCH frame GSNA PRACTICAL ASSIGNMENT, VERSION 3.2, OPTION 1

DAN AIKEN, GSEC DECEMBER 15, 2004

Abstract I am auditing an Internet-based activity used for human studies medical look at an academic medical center. I allow for border it the Collaborative Research System (CRSa fictitious spot for a live production application).



Research is one of the triplet emphases at the medical center, along with teaching and__first and foremost__providing excellent affected role care. This system was first implemented as an intranet-based system and later moved to the internet. The information processed and stored by CRS is sensitive unhurried and search information. A high level of protection for CRS is spanking to the hospital and its research organization, especially since CRS is accessible from the Internet. Therefore, I will audit CRS to assess its ability to protect patient and research information from outside attacks against the most common Web application vulnerabilities. This audit will be specific to the application. The network, server, and workstations are indite in the audit to define the environment,...If you want to get a full essay, order it on our website: Orderessay



If you want to get a full essay, wisit our page: write my essay .