Security Requirements

Status - In Progress (almost complete)

Contact

Please email the mifos-developer list if you are interested in helping on this project.

Mentor

Adam Monsen

Developer

Denis Foo Kune

Overview

Provide user-focused (deployment-related) security recommendations for Mifos as well as developer-focused (architecture-related) recommendations.

Time Estimate

~120 total hours, project can be done in steps.

Prerequisite experience

  • Strong background in securing software and corporate infrastructure required.
  • Experience with Java and web applications preferred.

Background

A security expert is needed to come up with a bulletproof security story for Mifos. How should Mifos be deployed and used securely? How should Mifos behave to be considered a secure, trustable banking application?

Details

  • Provide high-level security recommendations directed towards Mifos specialists. Examples: SSL, VPN, biometrics.
  • Provide low-level security recommendations for Mifos from an architecture perspective. Examples: How should passwords be stored?

Steps