Secure vs Insecure E-Commerce Prototype

Overview

This repository contains two Python Flask e-commerce prototypes developed for a study on mitigating OWASP Top Ten vulnerabilities through secure development practices.

Insecure Prototype – functional system with intentional vulnerabilities for testing and demonstration.
Secure Prototype – refactored system using secure design, coding practices, and mitigations for all identified vulnerabilities.

The purpose is to provide a side-by-side comparison between insecure and secure implementations.

Installation & Setup

Python Version Requirements

Insecure Prototype: Python 3.7
Secure Prototype: Python 3.12

Install the appropriate Python version before proceeding.

Clone the repository:

git clone https://github.coventry.ac.uk/kanikowskf/FK-7030CEM.git
cd FK-7030CEM

Install dependencies for the prototype you want to run:

For Insecure Prototype

pip install -r "Insecure Prototype/requirements.txt"

For Secure Prototype:

pip install -r "Secure Prototype/requirements.txt"

Run the application (example for Secure Prototype):
```
cd "Secure Prototype"
python run.py
```

Usage

Insecure Prototype – explore vulnerabilities for security testing and analysis.
Secure Prototype – review mitigations and compare against the insecure version.

Testing

Run automated security tools (examples):

python -m pip_audit
python -m bandit run.py

kanikowskf/FK-7030CEM

About

Resources

Stars

Watchers

Forks

Releases

Languages