Automated Car Parking System Security

This assignment analyzes the potential risks associated with an automated car parking revenue control system. It identifies various threats, including unauthorized access to system data and manipulation of financial transactions. The analysis emphasizes the need for robust identity and access management, employee training, and adherence to latest security standards to mitigate these risks. The document also suggests using Agile methodology and PMBOK for project development and management.

Capstone project case study
Automation of Car Parking Revenue Control System
City of Yule
9/19/2017

Automation of Car Parking Revenue Control System
Table of Contents
Feasibility Study..........................................................................................................................................3
Requirement Analysis..............................................................................................................................3
Functional Requirements.....................................................................................................................3
Non-Functional Requirements.............................................................................................................3
Cost-Benefit Analysis..............................................................................................................................4
Risk Analysis...........................................................................................................................................4
Final Recommendation............................................................................................................................6
References...................................................................................................................................................7
2

Automation of Car Parking Revenue Control System
Feasibility Study
Requirement Analysis
The automation of car parking revenue control system will be required to be done such that the
automated control of the payments for the frequent and non-frequent customers is done. The
following sets of functional and non-functional requirements shall be fulfilled by the system.
Functional Requirements
 Reservation of parking space in the car parks for the frequent/regular customers during
the weekdays by issuing them a special access control card.
 Automatic identification of the frequent customers using the card that is assigned to them
and deduction of the payment from the same.
 Generation of ticket for infrequent customer by issuing them a ticket with date and time
mentioned on the same.
 Calculation of payment as per the ticket number and the duration spent in the car park.
 Acceptance of payment through card or cash.
 Generation of the automated reports on the number of cards/tickets issued and other
customer details.
 Non-reservation for the frequent customers during the weekends.
 Maintenance of the vehicle details in the system database for every day.
 Automated generation of invoice for the customers.
Non-Functional Requirements
 The system shall be available at all times so that the vehicles may be parked and revenue
is controlled at any hour of the day (Chung, 2013).
 The system shall be reliable so that valid payment information is displayed on the system.
 The system shall showcase good performance so that the customers do not have to wait
for long for the completion of the payment process.
 The system shall be easy to maintain and upgrade.
 The system shall be usable in nature such that it is designed and deployed as per the
functional aspects associated with it (Eeles, 2015).
3

Automation of Car Parking Revenue Control System
Cost-Benefit Analysis
There will be a lot of cost that will be required to set up and implement the system.
A one-time cost will be involved for the procurement of tools such as sensors, hardware,
software, databases etc.
There will be resources involved in the design, development and deployment of the system and a
share of cost will be necessary for them.
The cost of project activities will also be involved such as design and development cost, testing
and implementation cost and maintenance cost.
An overall budget of USD 60,000 has been estimated for the project.
Risk Analysis
Risk Name Description Likelihood Impact Response
Strategy
Information
Breaching and
Leakage
There will be
many networks
and technical
components that
will be used in
the system which
may be acquired
by the attackers
for unauthorized
information
capturing and
access (Soriano,
2011)
Medium Medium-High Risk mitigation
by using security
measures, such
as, advanced
access control,
authentication
processes,
firewalls, and
intrusion
detection and
prevention
systems (Dcu,
2015).
4

Automation of Car Parking Revenue Control System
Denial of Service
Attacks
The availability
of the systems
may be impacted
by the flooding
attacks such as
denial of service
attacks in which
unnecessary
traffic may be
launched by the
attackers on the
system networks
(Crane, 2013)
Medium High Risk avoidance
by implementing
anti-denial tolls
integrated with
the system
Malware Attacks There may be
attacks of
malware such as
viruses, worms,
Logic bombs etc.
High Medium Risk avoidance
by implementing
anti-malware
tolls integrated
with the system
Eavesdropping
Attacks
Man in the
middle and other
network based
eavesdropping
attacks may be
executed to
capture the
network
activities
Medium High Use of advanced
network based
intrusion
detection and
prevention
systems for
avoidance of the
risks and their
prevention
(Pareek, 2011)
SQL Injection The security of
the database may
be compromised
Medium Medium-high Risk mitigation
by automated
data backups and
5

Automation of Car Parking Revenue Control System
by the SQL
injection attacks
which may have
an adverse
impact on the
data
confidentiality
use of advanced
access control
(Berg, 2010)
Insider Attacks The employees
may transfer the
system related
information to
the unauthorized
parties for selfish
gains
High High Risk avoidance
by enhancement
of the identity
and access
management
along with
arrangement of
training for the
employees of the
organization
Final Recommendation
There are many risks that are associated with the automated car parking revenue control system.
However, these risks can be avoided and mitigated with the use of security controls and
measures. There shall also be active involvement of the management so that the latest security
standards and practices are followed.
The project has been found to be feasible from the aspects of technical, operational and
economical feasibility. It is recommended that an adequate development and management
methodology is used in the project for the efficient management of the project tasks and
activities. Agile methodology shall be used for the development of the project and it shall be
managed using the management methodology as PMBOK. This methodology will handle the
project risks and conflicts with ease and the management will be provided with the guidelines to
carry out overall project management as well (Debono, 2016).
6

Automation of Car Parking Revenue Control System
References
Berg, H. (2010). Risk Management: Procedures, Methods and Experiences. [online] Available
at: http://ww.gnedenko-forum.org/Journal/2010/022010/RTA_2_2010-09.pdf [Accessed 18 Sep.
2017].
Chung, L. (2013). Non-Functional Requirements. [online] Available at:
https://www.utdallas.edu/~chung/SYSM6309/NFR-18-4-on-1.pdf [Accessed 19 Sep. 2017].
Crane, L. (2013). Introduction to Risk Management. [online] Available at:
http://extensionrme.org/pubs/IntroductionToRiskManagement.pdf [Accessed 18 Sep. 2017].
Dcu (2015). Introduction to Risk Management. [online] Available at:
https://www.dcu.ie/sites/default/files/ocoo/pdfs/Risk%20Mgt%20Training%20Slides.pdf
[Accessed 18 Sep. 2017].
Debono, R. (2016). Project Risk Management. [online] Available at:
http://www.isaca.org/chapters11/Malta/Documents/Events/210416%20-%20Mark_Debono%20-
%20Understanding_Risk_in_the_Field_of_Project_Management.pdf [Accessed 18 Sep. 2017].
Eeles, P. (2015). Non-Functional Requirements. [online] Available at:
http://www.architecting.co.uk/presentations/NFRs.pdf [Accessed 19 Sep. 2017].
Pareek, R. (2011). Network Security: An Approach towards Secure Computing. [online]
Available at: https://www.rroij.com/open-access/network-security-an-approach-towards-secure-
computing-160-163.pdf [Accessed 16 Sep. 2017].
Soriano, M. (2011). Information and Network Security. [online] Available at:
http://improvet.cvut.cz/project/download/C2EN/Information_and_network_security.pdf
[Accessed 18 Sep. 2017].
7