Official (ISC)2 Guide to the CSSLP

Chapter 1

Secure Software Concepts

1.1 Introduction

Ask any architect and they are likely to agree with renowned author Thomas Hemerken on his famous quote, “the loftier the building, the deeper the foundation must be laid.” For superstructures to withstand the adversarial onslaught of natural forces, they must stand on a very solid and strong foundation. Hack-resilient software is one that reduces the likelihood of a successful attack and mitigates the extent of damage if an attack occurs. In order for software to be secure and hack resilient, it must factor in secure software concepts. These concepts are foundational and should be considered for incorporation into the design, development, and deployment of secure software.

1.2 Objectives