6. Secure Software Development

Try these first

1. 1.

   What is the purpose of Secure Software Development?

   Hint

   Think about the overall goal of software security.

2. 2.

   Name one common software vulnerability.

   Hint

   Consider vulnerabilities that target database queries.

3. 3.

   What does secure software development ensure?

   • Security at the end
   • Security at every phase
   • Security is optional

   Hint

   Consider at what stage security can be effectively integrated.

4. 4.

   True or False: OWASP has a list of the top 10 security risks that should be regularly reviewed in development.

   • True
   • False

   Hint

   Think about how often practices should be assessed.

5. 5.

   Imagine you are a software engineer tasked with developing a new web application. Describe how you would integrate security into each phase of the SDLC.

   Hint

   Think about what practices can be implemented at each step of the process.

6. 6.

   Analyze the consequences of failing to apply patches based on the Equifax breach case. What lessons can be derived for future software projects?

   Hint

   Consider the long-term implications of data breaches.