Final Disc 9

In this session, you studied several testing and analysis techniques. The following testing and analysis techniques are particularly relevant to finding vulnerabilities that affect security:

• Brute force or random testing
• Security fault injection testing
• Compliance testing
• Reliability testing
• Operational testing
• Static analysis
• Reviews and audits

For this paper, pick one of these testing techniques, explain what it is, how it is specifically intended for testing security aspects of a system, how it is carried out and any drawbacks it has.

OERs

• DHS. (2007). Software Assurance: A Curriculum Guide to the Common Body of Knowledge to Produce, Acquire, and Sustain Secure Software. Retrieved from: https://learn.umgc.edu/content/enforced/313879-M_022073-01-2185/Common_Body_of_Knowledge2007.pdf?_&d2lSessionVal=yHNXTIp6y56ZPEX8jKq29unVQ&ou=313879
  • Chapter 8 Secure Software Verification, Validation, and Evaluation Pages 127 – 141
• Wheeler, D. (2016). Secure Software Design & Programming
  Lecture 9: Analysis Approaches
  & Tools.Retrieved from: http://www.dwheeler.com/secure-class/presentations/Secure-Software-9-Tools.ppt.
• OWASP. (2016). Static Code Analysis.Retrieved from: https://www.owasp.org/index.php/Static_Code_Analysis.

  Due sep 20th