An Efficient Identification of Security Threats in Requirement Engineering Methodology

Table 5

Identified hack points (HP).

HP ID	Hack point (HP)	Explanation
HP1	Hypertext transfer protocol secure (HTTPS)	HTTPS port that the web server listens on
HP2	Access page	Page for patients or doctor to create an access and perform an access to the site to begin requesting or reviewing records
HP3	Create access function	Creates a new patient or doctor access
HP4	Access to site function	Compares authorized person login details to those in the DB and if credentials match, create a new session
HP5	Entry page	In this page, doctors’ and patients’ personal data will be entered into the DB.
HP6	Recover data function	Permit the allowed person to recover the DB.
HP7	Presenting data function	Permit admin to recover the doctor and patient data
HP8	Admin evolution page	Permit admin to recover the doctor and patient demand
HP9	Recover data function	Recover doctor and patient data
HP10	Presenting data function	Presenting any data information for the student or staff
HP11	List demand function	Lists requests are ready for examination.
HP12	DB listening ports	Permit the DB to be used remotely by authorized persons
HP13	DB stored procedures	Recover and save information in the DB
HP14	Access process	Build access page for permitted persons
HP15	Removing access process	Sign out from the hospital ERP system
HP16	Store user data procedure	Used to store user data from the entry page of the ERP system
HP17	Recover user data procedure	Recovers the user’s data and request