Overview
A security analyst’s responsibility in the software development life cycle (SDLC) is to interface with programmers rather than write code. Many programmers are not skilled in secure programming. Therefore, it is your job as a security analyst to help identify areas of concern.
For this project, you are a security analyst who is collaborating with a larger software development team. You are creating a recommendations report for the development team. You will describe areas of concern and how to avoid them based on your role as the security analyst. You will also explain the value your participation adds to the SDLC.
The project builds on skills you practiced in the Project Two Stepping Stone, which will be submitted in Module Three. The project will be submitted in Module Seven.
In this assignment, you will demonstrate your mastery of the following course competency:
Describe the fundamental principles and practices of application security
Scenario
Choose one of these scenarios as basis for your work:
Project Two Scenario One
Project Two Scenario Two
Use the scenario to address the critical elements.
Prompt
Select two known development issues/vulnerabilities relevant to the project in the scenario. You can use the issues or vulnerabilities you identified as part of the Project Two Stepping Stone you submitted in Module Three.
You must address the critical elements listed below in your recommendations report.
Development Issue/Vulnerability One
Describe why the OWASP element selected is a potential area of concern for the development team.
Recommend techniques or methods to apply a specific fundamental security design principle to avoid the development issue/vulnerability. Justify the relevance of the fundamental security design principle you select.
Development Issue/Vulnerability Two
Describe why the OWASP element selected is a potential area of concern for the development team.
Recommend techniques or methods to apply a specific fundamental security design principle to avoid the development issue/vulnerability. Justify the relevance of the fundamental security design principle you select.
Discuss the value of a security practitioner equipped with the fundamental security design principles in preventing security issues during the SDLC.
What to Submit
Your submission should be a Microsoft Word document that is 2 to 3 pages in length and written in APA format. Use double spacing, 12-point Times New Roman font, and one-inch margins