From the course: Programming Foundations: Secure Coding
Join today to access over 24,700 courses taught by industry experts.
Requirements
From the course: Programming Foundations: Secure Coding
Requirements
- One of the first places to improve the software development lifecycle or SDLC regarding secure coding is in the requirements phase. We usually spend a lot of time determining what the customer wants, how they want to use it, and what the rules are around that use. We don't, however, spend a lot of time evaluating the threats introduced because of these new features. So let's start there. Starting with threat modeling in the requirements phase of the SDLC starts to not only detail risks, but allows you to modify your requirements to reduce those risks. Software is constantly changing, but it's always cheaper to fix the issue, no matter the issue, the earlier you can in the process. Along the same lines is addressing the risk register. You need to keep the risks up-to-date and ensure that the new risks are documented. Through this documentation, you are providing information to development and QA that they can leverage to improve the security of the system as a whole. When building…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.
