Chapter 9

Software Assurance Best Practices

This chapter covers the following topics related to Objective 2.2 (Explain software assurance best practices) of the CompTIA Cybersecurity Analyst (CySA+) CS0-002 certification exam:

  • Platforms: Reviews software platforms, including mobile, web application, client/server, embedded, System-on-Chip (SoC), and firmware.

  • Software development life cycle (SDLC) integration: Explains the formal process specified by the SDLC.

  • DevSecOps: Discusses the DevSecOps framework.

  • Software assessment methods: Covers user acceptance testing, stress test application, security regression testing, and code review.

  • Secure coding best practices: Examines input validation, output encoding, session management, authentication, ...

Get CompTIA Cybersecurity Analyst (CySA+) CS0-002 Cert Guide, 2nd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.