10 Questions
What does secure development refer to?
Secure development refers to the set of tools, practices, and approaches created to identify and prevent security flaws during early development of software systems.
What is the challenge with the volume of code produced by developers each year?
The challenge is that at that volume, there’s a high opportunity for error, and it becomes harder and harder to catch those errors as the amount of code continues to increase.
Why is it most cost effective to identify and prevent security flaws during early development of software systems?
It is most cost effective because it becomes harder and harder to catch errors as the amount of code continues to increase, and the cost to remove defects, including security flaws, can be hundreds of times higher after deployment.
Why do errors still manage to get into commercially available products despite the use of automated testing tools?
Errors still manage to get into commercially available products because even with automated testing tools, errors can still occur and come with significant costs and risks.
What do research studies show about the cost to remove defects, including security flaws, after deployment?
Research studies have shown that the cost to remove defects, including security flaws, can be hundreds of times higher after deployment.
What are some of the significant costs and risks associated with errors in commercially available products?
Errors in commercially available products come with significant costs and risks, and many research studies have shown that the cost to remove defects, including security flaws, can be hundreds of times higher after deployment.
What is the potential security risk associated with errors in software systems?
Many of the errors in software systems can pose security risks that criminals or state agents might exploit.
Why is it challenging to catch errors as the amount of code continues to increase?
It becomes harder and harder to catch errors as the amount of code continues to increase.
What does the term 'secure development' refer to?
Secure development refers to the set of tools, practices, and approaches created to identify and prevent security flaws during early development of software systems.
What is the volume of code produced by developers each year, and why does it present an opportunity for error?
Developers produce billions of lines of code each year, and at that volume, there’s a high opportunity for error.
Test your knowledge of secure development practices with this quiz from the Software Engineering Institute. Explore the tools and approaches used to identify and prevent security flaws in software systems early in development.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
