CLASP Concepts

Question 1

What are the Concepts behind Developing CLASP?

Answer 1

1- Adaptability of CLASP to Existing Development Processes
2-CLASP Vulnerability Lexicon
3-Automated Analysis Tool

Question 2

what does Adaptability to Existing Development Processes mean?

Answer 2

CLASP is designed to easily integrate its security activities in the existing application lifecycle.
each activity in CLASP is divided into discrete process components and linked to one or more specific project roles. In this way CLASP can provide guidance to project participants that is easy to adopt to their way of working;

Question 3

can you talk about CLASP Vulnerability Lexicon?

Answer 3

CLASP contains them to help development teams avoid/remediate specific designing/coding errors that can lead to exploitable security services.
The basis of this Lexicon is a highly flexible taxonomy which enables evelopment teams to quickly locate Lexicon information from many perspectives.

Question 4

what about Automated Analysis Tool in CLASP

Answer 4

Much of the information in the CLASP Vulnerability Lexicon can be enforced through use of automated tools using techniques of static analysis of source code.