Text INTERNAL Project Presentation (Processes Followed) Infinity DTH Services-Module 1 HYD12/HJA54-Group-1 gokul(842007) Aakanksha(835620) Preetham(843274) Arshiya(834442) Shiv(854695)

INTERNAL Phases of the Project Analysis and Design Development/Construction Testing/Defect Fixing

INTERNAL ETVX MODEL Entry CriteriaTasksVerification & validationExit Criteria

Text Analysis & Design

INTERNAL ETVX for Analysis & Design Entry Criteria: – case study of Infinity DTH services was provided. Tasks: - Based on the case study different activities such as identifying actors and their roles were done.Noun and Verb pairs were found to identify relationships. - SRS Document, Use case, sequence and class Diagrams were prepared. Test cases were prepared. Verification/Validation: - The review of SRS document was done in this phase. Exit Criteria: - The uses cases and DMD,SRS Document are prepared which are inputs for the Development phase. Work Items/Deliverables: - SRS, Use case diagram, sequence diagrams, Class Diagram,test cases

Text Development/Construction

INTERNAL ETVX for Development/Construction Entry Criteria: - SRS Document with LLD and HLD of “Infinity Dth” Module 1. Tasks: - Coding of Individual Sub modules is done in this phase. Verification/Validation: - Sub modules are integrated by “Bottom Up Integration” Approach and integration test is done in this phase. - After integration “Black Box Testing” is done on total Module 1. Exit Criteria: - Reviewed code Work Items/Deliverables: - Reviewed code

Text Testing/Defect Fixing

INTERNAL ETVX for Testing/Defect Fixing Entry Criteria: - The Infinity DTH service code is implemented in J2EE. - It consist of mainly two technology struts2 and hibernate. Tasks: - We tested the whole web application from Security point of view as well as SRS point of view. - We tested the Web Application with the help of “Kali Linux”. - The main aim behind this activity was to secure the transmitted information and to secure the code from the various attacker’s point of view. Verification/Validation: -OWASP top 10 Vulnerability. (XSS, Session Hijacking, DOS) -Best practices for keeping password and personal sensitive information.(ISO 27001) -Encrypted Traffic instead of plain text information. -Server Misconfiguration, and revealing server Information. -Customized Error Pages. -Brute Force Attack. -File Inclusion.

INTERNAL ETVX for Testing/Defect Fixing (Contd..) Exit Criteria: -The web application was completely secure from OWASP top 10 vulnerability. - Web application compliance with ISO 27001, PCIDSS. Work Items/Deliverables: - Defect Log -Test Cases -Secure Code.

Text Thank You