CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ247

VerifiedSecure Software Concepts

A number of security design patterns have been developed for software assurance in general.

Drag & Drop
It limits the ability of an attacker to distinguish the internal workings of an application.
It splits a large and complex application into two or more simple components.
It distributes application-specific sanity checks throughout the system.
It creates a wall around the Web server to include the damage occurred in the server.
Explanation

Hidden implementation reduces information an attacker can learn about an application's internals. Partitioning separates a complex application into smaller components. Secure assertions apply sanity checks at appropriate points throughout the system. A server sandbox isolates the web server to limit the impact of a compromise.

Community Discussion

No comments yet. Be the first to start the discussion!