Secure Development Lifecycle

Question 1

Name 2 secure development life cycles

Answer 1

1. Microsoft SDLC
2. OWASP OpenSAMM (Software Assurance Maturity Model)

Question 2

Name 2 problems that could appear during the design stage of a SDLC

Answer 2

1. Design flaws slip into coding phase
2. Errors could come from bad requirements

Question 3

Why dont the test team find security flaws?

Answer 3

The test team is looking for mainly functional issues

Question 4

At the requiements stage how would you mitigate security issues? (2)

Answer 4

1. Education
2. Risk analysis

Question 5

At the design stage how would you mitigate security issues?

Answer 5

• Threat Modelling

Question 6

At the code stage how would you mitigate security issues?

Answer 6

• Secure code reviews

Question 7

At the test stage how would you mitigate security issues?

Answer 7

1. Risk analysis
2. pen testing (final stage is bad practise)