6.2.3. Development

Try these first

1. 1.

   What is input validation?

   Hint

   Think about why we need to check user inputs.

2. 2.

   Name one common secure coding standard.

   Hint

   What organization focuses on software security?

3. 3.

   What is the primary goal of the Development phase in secure software?

   • To write any code quickly
   • To implement secure code
   • To deploy the software
   • To gather requirements

   Hint

   Remember the focus of security in the development process.

4. 4.

   True or False: Input validation is not necessary for secure coding.

   • True
   • False

   Hint

   Consider the risks of not validating inputs.

5. 5.

   You have a codebase that has no input validation. Describe the steps you would take to begin the process of securing it.

   Hint

   Start by making a list of every area where users can input data.

6. 6.

   Given a scenario where your application faced an SQL injection attack, list the changes you would implement in your development process to prevent recurrence.

   Hint

   Think about what went wrong and how to fix vulnerabilities.