CSC 1029 Week 05 SDLC PDF

CSC 1029 SECURITY DEVELOPMENT LIFECYCLE SDL  OBJECTIVES AGENDA: WEEK 5 Equip individuals with the knowledge 1. SDLC: Software Development and skills needed to integrate security Lifecycle practices throughout the software 2. Water...

CSC 1029 SECURITY DEVELOPMENT LIFECYCLE SDL  OBJECTIVES AGENDA: WEEK 5 Equip individuals with the knowledge 1. SDLC: Software Development and skills needed to integrate security Lifecycle practices throughout the software 2. Waterfall, Spiral, V-Model, Big Bang development process to create resilient and secure software 3. Agile, Agile Manifesto and Principles applications. 4. SDLC: Which Model? Understand the concepts of SDL and 5. RAD, Software Prototyping for the SDL-process and it's phases. 6. SDL: Security Learn about how to integrate SDL into Development Lifecycle agile development methods. 7. MS Secure Development Lifecycle Improve development process with SDL implementation 8. TODO & Resources for Help SDLC: SOFTWARE DEVELOPMENT LIFECYCLE SDLC is a process that consists of a series of planned activities to develop or alter the Software Products. This overview of the SDLC basics, SDLC models available and their application in the industry. Review: SDLC - Home SDLC - Overview SDLC: WATERFALL MODEL Read the tutorial: SDLC - Waterfall Model Watch the Video linked in the PearDeck Note the main pro and main con of Waterfall Model SDLC: SPIRAL MODEL Read the tutorial: SDLC - Spiral Model Watch the Video linked in the PearDeck Note the main pro and main con of Spiral Model SDLC: V-MODEL Read the tutorial: SDLC - V-Model Watch the Video linked in the PearDeck Note the main pro and main con of V-Model SDLC: BIG BANG MODEL Read the tutorial: SDLC - Big Bang Model Watch the Video linked in the PearDeck Note the main pro and main con of Big Bang  SDLC: AGILE MODEL Agile is the ability to create and respond to change. It is a way of dealing with, and ultimately succeeding in, an uncertain and turbulent environment. SDLC - Agile Model AGILE MANIFESTO & PRINCIPLES The Agile Manifesto was written in 2001 by seventeen independent- minded software practitioners. While the participants didn’t often agree, they did find consensus around four core values. https://www.agilealliance.org/agile101/the-agile-manifesto/ 12 principles of the agile manifesto: https://www.agilealliance.org/agile101/12-principles-behind-the- agile-manifesto/ SDLC: WHICH APPROACH? Read the tutorial: SDLC - Iterative Model Watch the Video linked in the PearDeck SDLC: RAD MODEL AND PROTOTYPE Read the tutorial: SDLC - RAD Model Read the tutorial: SDLC - Software Prototype Watch the Video linked in the PearDeck SAFECODE: SECURITY DEVELOPMENT LIFECYCLE 101 MICROSOFT SECURITY DEVELOPMENT LIFECYCLE Delivering secure software requires: Executive commitment → SDL a mandatory policy at MS since 2004 Requirem- Implemen- Respons Training ents Design tation Verification Release e Education Technology and Process Accountability Ongoing Process Improvements → 6 month cycle Review: https://www.microsoft.com/en-us/securityengineering/sdl SEI CYBER MINUTE EARN YOUR PRE-WORK GRADE Post your weekly discussion question and research solution to D2L TODO Complete Week 05 Content Module in D2L to 100% WHAT'S COMING UP NEXT...WEEK 06  QUESTIONS | CLARIFICATIONS | HELP Student Office Hours: Schedule Meeting with Julie o By Appointment (both on-campus and remote via Zoom) o Drop-In Times Available (on-campus) Email: [email protected] RRCC On Campus Tutoring: https://www.rrcc.edu/learning- commons/tutoring 24/7 Online Tutoring: D2L > Content > Resources for Help