Final Disc 10

This is on secure coding practices, Here is a recent list of Secure Coding Practices from OWASP: OWASP Secure Coding Practices. You may consult or use the following resources:

CMU CERT Coding Standards and

Microsoft Secure Coding Guidelines.

For this paper, pick a coding practice ( e.g., Input Validation, Error Handling), describe in your words what the practice is, what vulnerabilities the practice can minimize or eliminate or abuse cases it can prevent.

OERs

• DHS. (2007). Software Assurance: A Curriculum Guide to the Common Body of Knowledge to Produce, Acquire, and Sustain Secure Software. Retrieved from: https://learn.umgc.edu/content/enforced/313879-M_022073-01-2185/Common_Body_of_Knowledge2007.pdf?_&d2lSessionVal=yHNXTIp6y56ZPEX8jKq29unVQ&ou=313879.
  • Chapter 9 Secure Software Tools and Methods 143 – 148
  • Chapter 10  Secure Software Processes Pages 149 – 156
• Microsoft. (n.d.). Security Development Lifecycle.  Retrieved from: https://www.microsoft.com/en-us/sdl/.
• McGraw, G. (2009). Cigital. Software Security Touchpoint: Architectural Risk Analysis

  Due Sept 22nd