Exercises
-
13.1. Explain the important differences between application security engineering and infrastructure security engineering.
-
13.2. For the Mentcare system, suggest an example of an asset, an exposure, a vulnerability, an attack, a threat, and a control, in addition to those discussed in this chapter.
-
13.3. Explain why there is a need for both preliminary security risk assessment and design risk assessment during the development of a system.
-
13.4. Extend the table in Figure 13.7 to identify two further threats to the Mentcare system, along with associated controls. Use these as a basis for generating software security requirements that implement the proposed controls.
-
13.5. Explain, using an analogy drawn from a non-software ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access