System security plan & Status report Trevor Boardman, Joe Kadrich, Tristan Hummel & Eric Roby

Security Plan Web Portal Limit account creating abilities Limit professors access to their own classes Make adding students and professors an administrator role Limit the scope of each type of account Make sure students are unable to access web portal

security plan Server Ensure only necessary ports are open to help prevent unwanted access Ensure only necessary features are installed Ensure only admins are able to access the server directly

security plan Database Ensure only admins are able to access and change the database directly Ensure the database can’t be accessed by students Ensure that no new tables are able to be created Make sure relationships are created with security in mind

security plan App Ensure students are only able to access their own quizzes/ information Make sure grades are kept confidential Make sure the app requires all students to change their password on the initial login

Progress Report Server up and running LAMP installed Phpmyadmin installed Drupal installed and functional Server is now on public IP Admin accounts added and permissions set Quiz database created

Php files added to server to submit form data to database Tables Added and Populated with Data: ClassInfo, ProfessorInfo, Quiz, StudentGrades and StudentInfo Drupal Pages Added: Home, Create Quiz, Classes, Students, Add Student form, Profile Php files added to server to submit form data to database Quiz structure for app updated Working on: Connecting app to database Adding permissions for professors and admins on drupal Integrating quiz structure into existing app shell Improving and revising Drupal pages Adding additional Drupal functionality such as adding students to a class, updating student grades, etc.. Improving theme within drupal