I be coughing tho

Question 1

requirements define the system from the

Answer 1

client’s pov

Question 2

design defines the system from the

Answer 2

dev’s pov

Question 3

implementation:

Answer 3

actual coding and testing

Question 4

static verification:

Answer 4

techs of verification that do not include software execution. can be manual (code review) or use tools

Question 5

dynamic verification

Answer 5

testing with trial data, debugging

Question 6

white box testing

Answer 6

look at the code and try and make it fail.

Question 7

coverage criteria

Answer 7

functional ,statement, edge

Question 8

effectiveness

Answer 8

The accuracy and completeness with which users achieve certain goals. Measures: quality of solution, error rates

Question 9

Efficiency

Answer 9

The relation between the effectiveness and the resources expended in achieving them
Measures: task completion time, learning time, number of clicks

Question 10

Satisfaction

Answer 10

The users’ comfort with and positive attitudes towards the use of the system
• Measures: attitude rating scales

Question 11

defect

Answer 11

implementation and design vulnerabilities. Deviation from requirements.

Question 12

bugs

Answer 12

implementation level

Example: Buffer overflow.

Question 13

flaws

Answer 13

are problems at a deeper level. They are instantiated in
the code and present or absent at design-level.
Example: Error-handling problems.

Question 14

Failures

Answer 14

software fails to perform its required function

Question 15

Risks

Answer 15

Risk = probability x impact (severity)

Question 16

Vulnerabilities

Answer 16

are errors that an attacker can exploit.

Question 17

types of security practices:

Answer 17

abuse cases (anticipate abnormal behavior and defend), architectural risks (failure of web service to authenticate calling code mitigated by secure protocals and authentication), code reviews, pen testing, overall security operations (logging back ups).

Question 18

fault

Answer 18

the actual program or design error that caused the failure