CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ214

VerifiedSoftware Development Security

A software development company faces a short timeline to deliver a software product. To reduce development time, the development team chooses to use open-source software libraries. What concept should software developers consider when using open-source software libraries?

Explanation

Open-source software dependencies may have known vulnerabilities, including vulnerabilities that are actively exploited by adversaries. Secure dependency management requires identifying components and monitoring, patching, or mitigating known vulnerable versions.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!