Question

Comway Corporation is a medium- sized shoe wholesaler whose sales territory includes Illinois, Michigan, and Indiana. Every day, the sales managers for these states collect orders from retail stores. They then use local Internet service providers to connect to the Internet and enter the order information. In each case, the sales manager uses a Web browser client to enter the information into a Web server dedicated to collecting orders.
A problem has arisen recently with deliveries to some of Comway’s retail customers. For example, one customer, Brown Shoe Store, complained that it never received delivery of a $ 6,000 order that it had recently made. In order to investigate the matter, Sandra Hill, Comway’s controller, looked at the order files and concluded that the shoes were in fact shipped to a warehouse, several blocks from Brown Shoe Store. Brown, however, said that it had never authorized a shipment to anywhere but directly to its store.
Puzzled, Sandra Hill checked with Brown’s sales manager, who immediately produced a printed copy of the order. The sales manager had printed out the contents of the computer screen at the time he had entered the order, and sure enough, he had set the shipment up for normal delivery right at Brown’s store.
To further investigate, Sandra Hill checks the logs of the Web server used to collect orders from the sales managers. However, everything seemed in order, and it appeared the sales manager had used his proper password to access the Web serve

Required Analyze the problem and make suggestions as to its possible, cause. What additional information would you need to complete Sandra Hill's investigation? What additional security measure should be taken, if any?

Answer 1

Comway Corporation accepts the order thorugh web-browser which ultimately feeds to web server dedicated to collect the orders. One of his customer Brown Shoe Store have placed order however it is delivered nearby warehouse and not to Brown Shoe Store.

The sales manager have produced the printed computer screen for which he entered the detail and he provides confirmation that he set up delivery to Brown Shoe Store.

There are few possibilities :

- The Brown Shoe Store manager might have intentionally or unintentionally set up the address of near by place rather than Brown Shoe Store since the print out of computer screen current seems not to be showing delivery address, further even if it contains the delivery address it could have been changed before submission

- Usually edit rights are available to amend the order. It might be possible that someone know the login Id and password which Brown Shoe Store manager used & once order placed it could have been edited

- The next possibilities are relating to Cyber threat where either web browser client or access to web browser and such person amended data

Further investigation :

- Check the log of web-browser client to identify whether it was used on Brown Shoe Store Manager or some other person

- Check what data relating to delivery place were transmitted to Web Server

- Check log of Web Server to identify whether delivery address were changed prior to receipt of data in web server or post and what could be source

Recommendation :

- It seems that web-broswer client is not providing the detail of order once placed. Functionality should be developed that the person provided input should also have record of what he has provided input so that if he subsequently identify he can amend the detail

- The other recommendation is to improve cyber security like secure browser link with latest available securities and also improve if required cyber security of web server as well.