Fixing Payment Card Industry Java Web Application based on PCI compliance rules

Fixing Payment Card Industry Java Web Application You will modify an existing Java Web application that violates several Payment Card Industry guidelines and recommendations. Your task is to locate the issues, identify what is wrong and then fix the code. The current code, uses Java JSP and Servlets to allow a user to login to their account and view credit card data stored in the database. The functionality is relatively simple but several PCI compliance rules have been violated that will prevent the application from being approved by a PCI software auditor. You should first load up the application, populate the database and make sure the application is working in your environment as expected. The application uses the Java Derby relational database. The script used to populate the application is attached in your project folder as well as the Java web project itself. You should be able to open the existing project using Netbeans or Eclipse. However; you may need to load the Derby drivers to the libraries for the project. Once you have the database loaded, you can try the application. You can review the database script to see the current users and associated passwords. As a test, you can click the Sign in link and enter this account information.... After successful sign-in you will see the welcome message displayed: Clicking on the Your Account menu will display the credit card information. Clicking on Sign out will invalidate the current session. You have to find some of the issues about in the PCI documentation. Focus on the PCI compliance issues found in sections 6 through 9 as you look for issues. There are multiple issues and you should work to fix and document as many as possible. Deliverables Provide all of your modified Java code, your modified database script and a PDF document describing how you addressed each issue and what PCI compliance issue were violated and how you fixed it. You should provide screen captures as needed to support your findings and improvements.