click below
click below
Normal Size Small Size show me how
CH2Introduction
Software Vulnerability Fundamentals_Introduction : The Art of Software Security
| Question | Answer |
|---|---|
| How do the two main camps in computer security view the design review process? | Formal Dev: Receptive to it.see it as natural fit 4 software dev methodologies&easier than manual code reviews Code Auditor:Skeptical of it. view it as n "ivorytower construct"&bureaucratic barrier delays digging into actual code to find vulnerabilities. |
| Does a design review replace an implementation review in the software security process? | No. It does not replace it; it is a complementary component of the complete review process. |
| What are the two primary purposes of a design review? | Identifying vulnerabilities in application architecture. Prioritizing components for implementation review. |
| How does a design review impact the overall efficiency of the security review process? | It makes identifying design flaws easier, provides a thorough security analysis, and ensures the best return on time invested. |
| What three things does this chapter introduce to help identify security concerns? | Background on software design elements Background on design vulnerabilities A review process for software design |