Application security throughout the SDLC

Application security throughout the SDLC

What methods will make my applications more secure?

    Requires Free Membership to View

    Login

    When you register, you'll receive targeted emails designed to keep you informed of the most relevant information on Agile development, application security, testing & QA, software requirements, and more.

    Hannah Smalltree, Editorial Director

    By submitting your registration information to SearchSoftwareQuality.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSoftwareQuality.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Ideally, for any application, security is a process that is incorporated throughout the application's development life cycle. Security checks throughout the life cycle should include:

  1. A risk profile to determine the risk of an application to the organization.
  2. Defining specific security requirements to use throughout the project.
  3. A security design review
  4. A security code review
  5. A proper security test plan
  6. A penetration test.

By implementing these security measures, you will produce a much more secure application in the long run, at a much lower cost than trying to add security onto an application at the end.

More information:

This was first published in September 2006