click below
click below
Normal Size Small Size show me how
CH1Introduction
Software Vulnerability Fundamentals_Introduction : The Art of Software Security
| Question | Answer |
|---|---|
| how does the average person understand software | tends to think of software as a form of technological wizardry simply beyond understanding |
| What unique characteristic of software makes its complexity invisible to most people, unlike physical hardware? | Software lacks physical properties—people cannot see its wheels spin, hear its engine hum, or take apart its physical nuts and bolts to see how it works. |
| What has become such an integral part of society that it affects almost every aspect of people's daily lives? | Computer software |
| The widespread reliance on critical systems inevitably raises serious concerns about what issue? | System security. |
| what are common questions raised about the security of systems people depend on | You can’t help but wonder whether the software you use is really secure. How can you verify that it is? What are the implications of a failure in software security? |
| what are the core skills and goals of software code auditing | Dissect applications thoroughly. Discover security vulnerabilities. Assess vulnerability risk levels. Maximize audit time efficiency. Prioritize critical flaws first. Perform comprehensive security assessments. |
| What does the chapter introduce regarding the baseline of software security? | Elements: Components of a software vulnerability. Violations: Meaning of violating a software system's security. |
| What three core aspects of software assessment | Motivation: The "why" behind conducting an assessment. Types: Different methodologies of auditing. Process: How audits integrate with software development. |
| What final concepts does the chapter cover to help handle security issues? | Classification: Distinctions used to classify software vulnerabilities. Remediation: Methods to address common causes of security issues. |