Computer Science > QUESTIONS & ANSWERS > COM 508 Software Security Homework Assignment Module 4 Critical Thinking Chapter 7 & 8 (All)

COM 508 Software Security Homework Assignment Module 4 Critical Thinking Chapter 7 & 8

Document Content and Description Below

COM 508 Software Security Homework Assignment Module 4 Critical Thinking Chapter 7 1. Why is it important to incorporate security throughout the SDLC instead of just in one phase or another? Prov... ide justification for your position. 2. How can limiting scope creep enhance the security of the software system? 3. Why is it important to establish metrics for security in defining requirements? What would happen if there were no metrics established? 4. Why should requirements gathering be prevented after the scope of the system is defined? What implications does this have for both development and security? 5. Should the scope of a software system ever be modified to accommodate security changes? Justify your position. Critical Thinking Chapter 8 1. Identify the benefits and drawbacks of constructing misuse cases (in either the traditional form or the form presented here) in planning a software system. Justify your answer. 2. Why is it important to establish a ranking of vulnerabilities in a system? Use examples to show vulnerability priorities in action. 3. Why is consideration of error messages and outgoing information an important concern in vulnerability mapping? 4. What is the purpose of complete business system specification? Why is it important from the perspective of security? 5. Why should a system always be constructed to fail safely? What are the minimum expectations for a general system to have failed? [Show More]

Last updated: 2 years ago

Preview 1 out of 9 pages

Buy Now

Instant download

We Accept: