Secure Software Systems

Introduction

Ultimately every software system is going to be tested. It can be done by jumping to the ultimate crucible of real-world use. Many programmers feel that the quality of the code they produce is such that this is the only test ever needed. These are delusional people doomed to failure. Testing is a critical element of the secure software development life cycle and needs to be included from the start and conducted throughout the process.

Testing is the process of verifying and validating that a software system or application meets the intended requirements, performs as expected, and contains no unknown defects, flaws, or errors, and no unmitigated vulnerabilities. Verification is the process of ensuring that the system meets the provided ...