1
Q
What are the SDLC Phases?
A
- Design
- Implementation
- Testing
- Deployment & Maintenance
2
Q
What is a Requirement?
A
- Goal or constraint for a system
- Should answer What and Why
3
Q
Functional Requirements vs Quality Requirements
A
- Functional requirements define what a system does
- Quality requirements ensure system trust
4
Q
What is a Misuse Case?
A
Illegitimate/abnormal use of a system
5
Q
Misuse Cases vs Abuse Cases
A
- Misuse Case: broader term including unintended misuses
- Abuse Case: narrower term focusing on intentional attacks
6
Q
What are the Entities Introduced in a Misuse Case Diagram
A
- Misuse Case: Sequence of Actions that can be performed to harm the system
- Misuser: actor who initiates misuse case
7
Q
What are the Relations Introduced in a Misuse Case Diagram
A
- Mitigates: use case that mitigates the chance of a successful misuse case
- Threatens: misuse case threating a use case
8
Q
Characteristics of a Good Security Requirement
A
- Explicit
- Testable
- Tracable
9
Q
How are Risks Assessed?
A
Likelihood x Impact
Engineering Secure Software
flashcards
Decks in class (11)
# Cards
