#ANALYSIS MODEL IN SOFTWARE ENGINEERING CODE#
In keeping with the ‘secure SDLC’ concept, it is vital that security assurance activities such as penetration testing, threat modeling, code review, and architecture analysis are an integral part of development efforts. With modern application security testing tools, it is easy to integrate security throughout the SDLC. A secure SDLC is achieved by conducting security assessments and practices during ALL phases of software development. This idea of ‘baking-in’ security provides a ‘ Secure SDLC’- a concept widely recognized and adopted in the software industry today. By incorporating security practices and measures into the earlier phases of the SDLC, vulnerabilities are discovered and mitigated earlier, thereby minimizing overall time involved, and reducing costly fixes later in the life cycle. Today, it is understood that security is critical to a successful SDLC, and that integrating security activities throughout the SDLC helps create more reliable software.
The shortcomings of this after-the-fact approach were the inevitably high number of vulnerabilities or bugs discovered too late in the process, or in certain cases, not discovered at all. The initial concept and creation of the SDLC only addressed security activities as a separate and singular task, performed as part of the testing phase.
0 kommentar(er)
