Chapter 8 Customer query management system Security

The protection of computer based resources that includes hardware, software, data, procedures and people against unauthorized use or natural

Disaster is known as customer query management System Security.

System Security can be divided into four related issues:

• Security of customer query management

• Integrity of customer query management

• Privacy of customer query management

• Confidentiality of customer query management

SYSTEM SECURITY refers to the technical innovations and procedures applied to the hardware and operation systems to protect against deliberate or accidental damage from a defined threat.

DATA SECURITY is the protection of data from loss, disclosure, modification and destruction.

SYSTEM INTEGRITY refers to the power functioning of hardware and programs, appropriate physical security and safety against external threats such as eavesdropping and wiretapping.

PRIVACY defines the rights of the user or organizations to determine what information they are willing to share with or accept from others and how the organization can be protected against unwelcome, unfair or excessive dissemination of information about it.

CONFIDENTIALITY is a special status given to sensitive information in a database to minimize the possible invasion of privacy. It is an attribute of information that characterizes its need for protection.

9.2. SECURITY IN CUSTOMER QUERY MANAGEMENT SOFTWARE

System security refers to various validations on data in form of checks and controls to avoid the system from failing. It is always important to ensure that only valid data is entered and only valid operations are performed on the system. The system employees two types of checks and controls:

CLIENT SIDE VALIDATION

Various client side validations are used to ensure on the client side that only valid data is entered. Client side validation saves server time and load to handle invalid data. Some checks imposed are:

· VBScript in used to ensure those required fields are filled with suitable data only. Maximum lengths of the fields of the forms are appropriately defined.

· Forms cannot be submitted without filling up the mandatory data so that manual mistakes of submitting empty fields that are mandatory can be sorted out at the client side to save the server time and load.

· Tab-indexes are set according to the need and taking into account the ease of user while working with the system.

SERVER SIDE VALIDATION

Some checks cannot be applied at client side. Server side checks are necessary to save the customer query management system from failing and intimating the user that some invalid operation has been performed or the performed operation is restricted. Some of the server side checks imposed is:

· Server side constraint has been imposed to check for the validity of primary key and foreign key. A primary key value cannot be duplicated. Any attempt to duplicate the primary value results into a message intimating the user about those values through the forms using foreign key can be updated only of the existing foreign key values.

· User is intimating through appropriate messages about the successful operations or exceptions occurring at server side.

· Various Access Control Mechanisms have been built so that one user may not agitate upon another. Access permissions to various types of users are controlled according to the organizational structure. Only permitted users can log on to the customer query management system and can have access according to their category. User- name, passwords and permissions are controlled o the server side.

· Using server side validation, constraints on several restricted operations are imposed.

Chapter 10 CONCLUSION

It has been a great pleasure for me to work on this exciting and challenging project. This customer query management system project proved good for me as it provided practical knowledge of not only programming in ASP.NET and VB.NET web based application and no some extent Windows Application and SQL Server, but also about all handling procedure related with “customer query management system”. It also provides knowledge about the latest technology used in developing web enabled application and client server technology that will be great demand in future. This will provide better opportunities and guidance in future in developing projects independently.

BENEFITS:

The customer query management system project is identified by the merits of the system offered to the user. The merits of this project are as follows: -

· It’s a web-enabled project.

· This project offers user to enter the data through simple and interactive forms. This is very helpful for the client to enter the desired information through so much simplicity.

· The user is mainly more concerned about the validity of the data, whatever he is entering. There are checks on every stages of any new creation, data entry or updation so that the user cannot enter the invalid data, which can create problems at later date.

· Sometimes the user finds in the later stages of using project that he needs to update some of the information that he entered earlier. There are options for him by which he can update the records. Moreover there is restriction for his that he cannot change the primary data field. This keeps the validity of the data to longer extent.

· User is provided the option of monitoring the records he entered earlier. He can see the desired records with the variety of options provided by him.

· From every part of the project the user is provided with the links through framing so that he can go from one option of the project to other as per the customer query management system requirement. This is bound to be simple and very friendly as per the user is concerned. That is, we can sat that the project is user friendly which is one of the primary concerns of any good project.

· Data storage and retrieval will become faster and easier to maintain because data is stored in a systematic manner and in a single database.

· Decision making process would be greatly enhanced because of faster processing of information since data collection from information available on computer takes much less time then manual system.

· Allocating of sample results becomes much faster because at a time the user can see the records of last years.

· Easier and faster data transfer through latest technology associated with the computer and communication.

· Through these features it will increase the efficiency, accuracy and transparency,

LIMITATIONS:

· The size of the database increases day-by-day, increasing the load on the database back up and data maintenance activity.

· Training for simple computer operations is necessary for the users working on the system.

SPONSORED LINKS