Section 1: Lesson 2 - Software Security Challenges & Guidelines

Key Terms

application security

developing, adding, and testing security features to prevent vulnerabilities within applications

Building Security In Maturing Model (BSIMM)

a study of real-world software security that allows you to develop your software security over time

dynamic analysis

the analysis of computer software that is performed when executing programs on a real or virtual processor in real time

fuzz testing

automated or semi-automated testing that provides invalid, unexpected, or random data to the computer software program

National Institute of Standards and Technology (NIST)

provides research, information, and tools for government and corporate information security

measurement model

a set of data security methods that developers take to protect against vulnerabilities

metric model

allows an organization to determine the effectiveness of its security controls

Open Web Application Security Project (OWASP)

a flexible and prospective framework to build security into your software development organization

static analysis

the analysis of computer software that is performed without executing program