Chapter Seven Software Security Overview Quiz

<p>SQL injection</p> Signup and view all the answers

<p>Executing system commands</p> Signup and view all the answers

<p>Compromise to confidentiality and authentication</p> Signup and view all the answers

<p>To retrieve or modify important information from database servers</p> Signup and view all the answers

<p>By exploiting software defects</p> Signup and view all the answers

<p>Thinking about security early in the software development lifecycle</p> Signup and view all the answers

<p>Using better firewalls</p> Signup and view all the answers

<p>Protecting software and the systems that software runs in a post facto way</p> Signup and view all the answers

<p>Network-centric approach to security</p> Signup and view all the answers

<p>Sandboxing code</p> Signup and view all the answers

<p>Language-based flaws and pitfalls</p> Signup and view all the answers

<p>Principles of least privilege, fail-safe stance, and defence-in-depth</p> Signup and view all the answers

<p>To engineer software so that it continues to function correctly under malicious attack.</p> Signup and view all the answers

<p>Buffer overflow, stack overflow, command injection, and SQL injections.</p> Signup and view all the answers

<p>Malware can cause DoS (denial of service) or crash the system itself.</p> Signup and view all the answers

<p>It makes the software unsecure.</p> Signup and view all the answers

<p>Buffer and stack overflow attacks.</p> Signup and view all the answers

<p>Command injection can be achieved when system commands are used predominantly.</p> Signup and view all the answers

<p>Software security is about building secure software, while application security is about protecting software and the systems that software runs in a post facto way, after development.</p> Signup and view all the answers

<p>System-level security can be provided using better firewalls and by using intrusion detection and prevention to stop attackers from easy access to the system.</p> Signup and view all the answers

<p>Some critical issues related to application security include sandboxing code, protecting against malicious code, obfuscating code, locking down executables, and monitoring programs as they run.</p> Signup and view all the answers

<p>Common threats included in software security best practices are language-based flaws and pitfalls, designing for security, and subjecting all software artifacts to thorough objective risk analyses and testing.</p> Signup and view all the answers

<p>Malicious intruders can hack into systems by exploiting software defects.</p> Signup and view all the answers

<p>The only way to avoid such attacks is to practice good programming techniques.</p> Signup and view all the answers

<p>The most common security risk encountered with internet-enabled software applications is the software’s ever-expanding complexity and extensibility.</p> Signup and view all the answers

<p>Malicious intruders can hack into systems by exploiting software defects, which makes the software unsecure.</p> Signup and view all the answers

<p>Software design principles include the principles of least privilege, fail-safe stance, and defence-in-depth.</p> Signup and view all the answers

<p>New system commands appended to existing commands by malicious attack can cause DoS or stop services.</p> Signup and view all the answers