6 Application Security Flashcards
What is the purpose of a standardized software development life cycle?
To move software through development, test, staging, and production environments.
What should developers understand regarding code reuse?
The issues associated with code reuse and software diversity.
Which organization provides industry-standard principles for web application development?
Open Worldwide Application Security Project (OWASP).
Name a common vulnerability that software applications may suffer from.
Memory injection, buffer overflow, race condition.
What are two web-specific attacks that security professionals should understand?
Structured Query Language injection (SQLi), cross-site scripting (XSS).
How can application security be prioritized in operations?
By protecting code through input validation.
What is an important security measure for cookies used in web applications?
Transport encryption.
What should be routinely done to code to ensure security?
Code review, static and dynamic testing.
What does code signing provide to end users?
Assurance that code came from a trusted source.
What is the purpose of sandboxing in application security?
To test code in an isolated environment.
What is one main benefit of automation in secure operations?
Achieving efficiency and saving time.
List two drawbacks of automation.
- Complexity
- Cost
What is a drawback of creating automation in security operations?
Creating a single point of failure.
Name a common use case of automation and scripting for cybersecurity.
User and resource provisioning, managing security groups.
What does continuous integration and testing involve in cybersecurity?
Automation and scripting techniques.
Fill in the blank: One benefit of automation is _______.
[workforce multiplier]
True or False: Automation in security operations can lower reaction times.
True.
What can technical debt in automation lead to?
Maintenance, ongoing supportability issues.
What is a use case for application programming interfaces (APIs) in cybersecurity?
Creating and escalating tickets.
