Skip to content
This repository was archived by the owner on Oct 15, 2022. It is now read-only.

Solaireis/CWC-Application-Security-Project

Folders and files

NameName
Last commit message
Last commit date

Latest commit

9dae57d · Oct 9, 2022
Aug 19, 2022
Aug 16, 2022
Aug 19, 2022
Aug 8, 2022
Aug 11, 2022
Aug 11, 2022
Aug 5, 2022
Aug 13, 2022
May 22, 2022
Aug 18, 2022
Oct 9, 2022
Oct 9, 2022
Aug 14, 2022

Repository files navigation

CourseFinity Logo
CourseFinity Web Application using Flask
(Requires Python 3.10 and above)


Forked Project for IT2555 App Security Project [4 members]

This project consists of us making a SECURE web application using Flask as its framework and is based off a GitHub repository.

This project is also hosted on Google Cloud Platform Cloud Run at coursefinity.social

Group Members:

  1. Eden (Group Leader)
  2. Jason (Tech Lead)
  3. Wei Ren
  4. Calvin

Project Situation:

In the past, CourseFinity (a fictional company) provided physical lessons at their main centre in Aljunied. It was a place for teachers and students, both as a place to teach, and a place to learn skills through up-skilling.

However, with the rise of the online era, along with the COVID-19 pandemic, the convenience of online learning started becoming more appealing to students. CourseFinity hence experienced a steep drop in students and teachers coming to the centre for lessons.

In response, CourseFinity wants to hop onto the bandwagon, wanting to become fully digital and wants to shift its focus to cater more to an online platform and its global market. By attracting an even larger global consumer base, CourseFinity’s plans to digitally transform itself will definitely allow itself to regain and even surpass its previous customer count.

Project Description:

Our web application is based on a fictional company CourseFinity, which is part of the tutoring industry.

The web application is for students and teachers to connect together from all over the world and share their skills.

The teachers can upload videos and sell the courses to earn extra money for themselves while students can then buy the courses and start learning!


To Install All Libraries At Once:

pip install -r requirements.txt

How can I run the web application?

Unfortunately, you cannot run the application as our web application infrastructure mostly use Google Cloud Platform (GCP) APIs which requires you to have the necessary GCP service accounts json files.


OWASP Allocation:

Eden

  1. A01:2021 - Broken Access Control
  2. A05:2021 – Security Misconfiguration

Jason

  1. A02:2021 – Cryptographic Failures
  2. A07:2021 – Identification and Authentication Failures

Wei Ren

  1. A04:2021 – Insecure Design
  2. A09:2021 – Security Logging and Monitoring Failures

Calvin

  1. A03:2021 – Injection
  2. A08:2021 – Software and Data Integrity Failures

Mitigations Done by each member can be seen here!

Mitigations and Tasks

Tech Stack used!

My Skills