D48734-
34 Secure34 Software34 Design
1. SDLC Study 34online34at3434
34Phase https://quizlet.com/_edc0iq
1:34planning34-34a34vision34and34next34steps34are34created
2. SDLC34Phase342:34requirements34-
34necessary34software34requirements34are34determined
3. SDLC34Phase343:34design34-
34requirements34are34prepared34for34the34technical34design
4. SDLC34Phase344:34implementation34-
34the34resources34involved34in34the34application34from34a34known34resource34are34deter
mined
5. SDLC34Phase345:34testing34-
34software34is34tested34to34verify34its34functions34through34a34known34environment
6. SDLC34Phase346:34deployment34-34security34is34pushed34out
7. SDLC34Phase347:34maintenance34-34ongoing34security34monitoring34is34implemented
8. SDLC34Phase348:34end34of34life34-
34the34proper34steps34for34removing34software34completely34are34considered
9. BSIMM:34a34study34of34real-
world34software34security34that34allows34you34to34develop34your34software34security34o
ver34time
10. OWASP34SAMM:34flexible34framework34for34building34security34into34a34software34dev
elop-34ment34organization
11. Static34Analysis:34the34analysis34of34computer34software34that34is34performed34
without34executing34programs
12. Dynamic34Analysis:34the34analysis34of34computer34software34that34is34performed3
4when34executing34programs34on34a34real34or34virtual34processor34in34real34time
13. Fuzz34Testing:34automated34or34semi-
automated34testing34that34provides34invalid,34unex-
34pected,34or34random34data34to34the34computer34software34program
14. Waterfall34Development:34software34development34methodology34that34breaks34d
own34development34activities34into34linear34sequential34phases;34each34phase34depen
ds34on34the34deliverables34of34the34previous34one34and34corresponds34to34a34specializa
tion34of34tasks
15. Waterfall34Phases34(typical):34plan34->34build34->34test34->34review34->34deploy
16. Iterative34Waterfall34Development:34each34phase34of34a34project34is34broken34dow
n34into34its34own34waterfall34phases
17. Agile34Development:34software34development34methodology34that34delivers34functi
on-
34ality34in34rapid34iterations34called34timeboxes,34requiring34limited34planning34but34freq
uent34communication
18. Scrum:34framework34for34Agile34that34prescribes34for34teams34to34break34work34int
o34goals34to34be34completed34within34sprints
19. Scrum34Master34(Scrum34Role):34responsible34for34ensuring34a34Scrum34team34is
134/
347
, D48734-
34 Secure34 Software34 Design
34oper- Study34online34at34https://quizlet.com/_edc0iq
34ating34as34effectively34as34possible34by34keeping34the34team34on34track,34planning34an
d34leading34meetings,34and34working34out34any34obstacles34the34team34might34face
20. Product34Owner34(Scrum34Role):34ensures34the34Scrum34team34aligns34with34ove
rall34product34goals34by34managing34the34product34backlog34by34ordering34work34by34prior
ity,34setting34the34product34vision34for34the34team,34and34communicating34with34external
34stakeholders34to34translate34their34needs34to34the34team
234/
347
34 Secure34 Software34 Design
1. SDLC Study 34online34at3434
34Phase https://quizlet.com/_edc0iq
1:34planning34-34a34vision34and34next34steps34are34created
2. SDLC34Phase342:34requirements34-
34necessary34software34requirements34are34determined
3. SDLC34Phase343:34design34-
34requirements34are34prepared34for34the34technical34design
4. SDLC34Phase344:34implementation34-
34the34resources34involved34in34the34application34from34a34known34resource34are34deter
mined
5. SDLC34Phase345:34testing34-
34software34is34tested34to34verify34its34functions34through34a34known34environment
6. SDLC34Phase346:34deployment34-34security34is34pushed34out
7. SDLC34Phase347:34maintenance34-34ongoing34security34monitoring34is34implemented
8. SDLC34Phase348:34end34of34life34-
34the34proper34steps34for34removing34software34completely34are34considered
9. BSIMM:34a34study34of34real-
world34software34security34that34allows34you34to34develop34your34software34security34o
ver34time
10. OWASP34SAMM:34flexible34framework34for34building34security34into34a34software34dev
elop-34ment34organization
11. Static34Analysis:34the34analysis34of34computer34software34that34is34performed34
without34executing34programs
12. Dynamic34Analysis:34the34analysis34of34computer34software34that34is34performed3
4when34executing34programs34on34a34real34or34virtual34processor34in34real34time
13. Fuzz34Testing:34automated34or34semi-
automated34testing34that34provides34invalid,34unex-
34pected,34or34random34data34to34the34computer34software34program
14. Waterfall34Development:34software34development34methodology34that34breaks34d
own34development34activities34into34linear34sequential34phases;34each34phase34depen
ds34on34the34deliverables34of34the34previous34one34and34corresponds34to34a34specializa
tion34of34tasks
15. Waterfall34Phases34(typical):34plan34->34build34->34test34->34review34->34deploy
16. Iterative34Waterfall34Development:34each34phase34of34a34project34is34broken34dow
n34into34its34own34waterfall34phases
17. Agile34Development:34software34development34methodology34that34delivers34functi
on-
34ality34in34rapid34iterations34called34timeboxes,34requiring34limited34planning34but34freq
uent34communication
18. Scrum:34framework34for34Agile34that34prescribes34for34teams34to34break34work34int
o34goals34to34be34completed34within34sprints
19. Scrum34Master34(Scrum34Role):34responsible34for34ensuring34a34Scrum34team34is
134/
347
, D48734-
34 Secure34 Software34 Design
34oper- Study34online34at34https://quizlet.com/_edc0iq
34ating34as34effectively34as34possible34by34keeping34the34team34on34track,34planning34an
d34leading34meetings,34and34working34out34any34obstacles34the34team34might34face
20. Product34Owner34(Scrum34Role):34ensures34the34Scrum34team34aligns34with34ove
rall34product34goals34by34managing34the34product34backlog34by34ordering34work34by34prior
ity,34setting34the34product34vision34for34the34team,34and34communicating34with34external
34stakeholders34to34translate34their34needs34to34the34team
234/
347
