GreenGrow – Smart Plant Monitoring System Security Project – Web Application Authentication System
Institution: Nanyang Polytechnic
Tech Stack: C#, MySQL, Windows Forms
- Developed the Admin Interface using Windows Forms to monitor real-time sensor data and perform data filtering and historical trend analysis (temperature, light, and soil moisture).
- Implemented role-based access control, secure admin login with password policy enforcement, and Two-Factor Authentication (2FA) via email OTP.
- Designed and built multi-tenant admin management features to segregate organizational data and manage plant profiles securely.
- Developed modules for automated email/SMS alerts, with tracking of notification success rates to improve reliability.
- Created and maintained key MySQL database schemas including Alerts, Thresholds, Admin Profiles, and Daily Sensor Aggregates.
- Collaborated in a 4-member team to deliver a secure, scalable IoT-based system enhancing plant growth monitoring and management.
Security Project – Web Application Authentication System
Institution: Nanyang Polytechnic
Tech Stack: Python, Flask, MySQL, Flask-WTF, Flask-Mail, itsdangerous, validate_email, dnspython, reCAPTCHA API
- Built a login alert system to notify users of account activity through email, enhancing account access transparency.
- Integrated CAPTCHA (via Flask-WTF or reCAPTCHA API) to mitigate bot attacks and brute-force login attempts.
- Developed username validation logic using Python regex to prevent SQL injection and XSS attacks.
- Enforced strong password policies with requirements for length, complexity, and uniqueness.
- Implemented a secure password reset feature using token-based links sent via email (using Flask-Mail or itsdangerous).
- Configured HTTP Strict Transport Security (HSTS) headers to ensure all traffic uses secure HTTPS connections.
- Validated email inputs by integrating libraries like validate_email and dnspython to verify domains and MX records.