Q 1 - Functionality first and then security? In this age of technical specialisation, software developers generally focus on the functional and aesthetic requirements of a project. Unfortunately, developers often consider security as afterthought, as a secondary value.

What problems do you see with this attitude, and what solutions might you suggest? For this Discussion, you will select and summarise an article in the UoL library that promotes solutions for this problem.

To complete this Discussion: Post: Analyse the consequences of such a non-integrated attitude within software development on overall system security.

Find an article in UoL library that proposes solutions to this problem and briefly summarise those solutions for this Discussion.

Q 2 - Man-in-the-middle and session hijacking Collapse Total views: 7 (Your views: 1). Man-in-the-middle (MitM) attacks can intercept, redirect and steal communications and data sent between two innocent parties, and this can be done unknown to those parties.

In this Discussion, you will appraise and compare situations of MitM attacks and session hijacking attacks at application and network levels. For this Discussion, you will need to reference this resource: Lin, M. (2005) An overview of session hijacking at the network and application levels [Online].

To complete this Discussion: Post: Summarise what you learned from An Overview of Session Hijacking at the Network and Application Levels (Lin, 2005).

Consider how MitM attacks relate to session hijacking attacks at application and network levels.

Evaluate the extent to which MitM attacks are realistic threats. List several scenarios to support your viewpoint.