Smamfdlasf
Smamfdlasf
fast
scalable
distributed revision control system
rich command set
code review or peer revierw- checking each other code for mistake
ignoring tremendous benefits of code reviews or code inspections at your own peril
_______________________________________
sdlc
requirement analysis>design>implementation> testing> evolution
SDL Discovery
1. security baseline
2. security training - developers, designer, architects, QACIA -
confidentiality,integrity, availability
threat modeling - identify and manage threats, plan for proper mitigation
- modeling the software components
threat modeling
1. create architecture design
2. analyze
3. describe mitigations
4. execute retrospective activity