Domain 8 -- Software Development Security Flashcards

Question

What are two key characteristics of Extreme Programming?

Answer 1

* Pair programming -- having two programmers work together on the same code * Test Driven Development - write the test before you write the code * This tends to keep code minimalistic * helps avoid complexity

Answer 2

* Stresses visual tracking * Planned / In Progress / Done

Answer 3

* An IPT is a multidisciplinary dev team with representatives from many or all stakeholder populations * It is not a methodology -- it is a management approach

Answer 4

* DevOps is the practice of incorporating development, IT and QA staff into software development projects to align their incentives and enable frequent, efficient and reliable releases of software products * Benefits: * Positive impact on security * Increases trust within an organization * Increases job satisfaction among developers, IT staff and QA

Answer 5

* The CMMI is a comprehensive, integrated set of guidelines for developing products and software. Used to rate software vendors * Five levels: 1. Initial 2. Repeatable 3. Defined 4. Managed 5. Optimizing

Answer 6

* **Change management** is a systematic approach to deliberately regulating the changing nature of projects, including software projects * **Change Control** is the process of controlling the specific changes that take place during the life cycle of a system and documenting the necessary change control activities

Answer 7

Change Control is part of Change Management

Answer 8

* They house intellectual property * If the bad guys get access to the code, they can analyze it and hack it.

Answer 9

* Centralized code repositories can carry out the main functionality * Versioning * Concurrency management * Logs of who made which changes * Checkout code and merge it back (known as synchronization)

Answer 10

1. Validate inputs 2. Heed computer warnings 3. Architect and design for security policies 4. Keep it simple 5. Default deny 6. Adhere to the principle of least privilege 7. Sanitize data sent to other systems 8. Practice defense in depth 9. Use effective QA techniques 10. Adopt a secure coding standard

Answer 11

1. Machine language 2. Assembler language 3. High level language (Fortran, Cobol) 4. Very high-level language 5. Natural language

Answer 12

* C is more susceptible to buffer over-run and string errors (string lengths are not checked) * C leaves garbage collection up to the developer, whereas as Java does it for the dev at the JVM level

Answer 13

instance, class

Answer 14

* Modularity * Deferred Commitment (internal aspects of an object can be redefined without changing other parts of a system * Reusability * Naturalness

Answer 15

* The shared portion of an object is the API that enables it to interact with other components * The private portion of an object is how it actually works and performs the requested operations * The private portion of an object enables data hiding (other objects don't need to know how the object works) * Data hiding is provided by encapsulation

Answer 16

Abstraction is the capability to suppress unnecessary details so the important, inherent properties can be examined and reviewed

Answer 17

Polymorphism takes place when different objects respond to the same command, input, or message in different ways.

Answer 18

Data modeling considers data independently of both the way the data is processed and the components that process the data

Answer 19

A data structure is a representation of the logical relationship between elements of data * Examples * Scalar * linked list * hierarchical tree

Answer 20

* Cohesion reflects how many different types of tasks a module can carry out. * If a module only carries out one tasks or similar tasks, then it has high cohesion.

Answer 21

* Coupling is a measurement that indicates how much interaction one module requires to carry out its tasks * High (tight coupling) means the module depends on many other modules to carry out its tasks * Loose coupling means the module doesn't need to communicate with very many other modules to perform its function

Answer 22

cohesion coupling

Answer 23

An API specifies the manner in which a software component interacts with other software components.

Answer 24

* It's a set of management services with a communications layer based on RPC * It is not running much anywhere, but it provided the foundational technologies for technology to follow, such as CORBA, DCOM, J2EE

Answer 25

CORBA stands for Common Object Request Broker Architecture Its an OO standard architecture developed by the Object Management Group. Widely used today. Objects can reside on different platforms and be written in different languages

Answer 26

* **COM** - Component Object Model allows for interprocess communication within an application or between applications on the same computer system. * **DCOM** supports the same model for component interaction and also supports distributed interprocess communication (IPC). DCOM enables appls to access objects that live on different parts of the network. * **DCOM** is layered over RPC technology

Answer 27

Object Linking and Embedding allows for: * objects to be embedded into documents * The capability for one program to call another program is called linking

Answer 28

Java EE defines a client/server model that is object oriented and platform independent. Similar in goals to DCOM and CORBA Allows devs to focus on functionality and not the backend plumbing

Answer 29

SOA -- Services Oriented Architecture provides a stnadardized access to the most needed services to many different applications at one time. SOA is a more web-based approach to the goal of distributed computing

Answer 30

A mashup is the combination of functionality, data and presentation capabilities of two or more sources to provide some type of new service or functionality.

Answer 31

SOAP - Simple Object Access Protocol. An advantage of it is that it uses http or https so it can get through firewalls.

Answer 32

Mobile code that can be transmitted across a network to be executed by a systemm or device on the other end. It's fine for things like downloading a file from a web site. It's dangerous when it's used for malicious or compromising actions, especially when the recipient is unaware that it is taking place.

Answer 33

A java applet is typically a small program written in Java desgined to run in the user's browser.

Answer 34

ActiveX is a Microsoft technology based on COM and DCOM that can be used to create ActiveX controls, which are similar to Java applets and can be executed in the Windows environment

Answer 35

Authenticode. It's not perfect It relies on digital certificates and trusting CA's.

Answer 36

**Java** has not been able to ensure that all code stays within the sandbox **ActiveX** relies on Authenticode which doesn't necessarily provide security. Users don't understand and just hit OK. Microsoft removed ActiveX from its **Edge** browser.

Answer 37

* Administrative interfaces * Authentication and access control * Input validation * Parameter validation * Session Management

Answer 38

* It ensures consistency among the data held in diff servers throughout the network * Allows for easier backups * Provides transaction persistence * Provides recovery and fault tolerance * Allows sharing of data with multiple users * Provides security controls that implement integrity checking, access control and the necessary level of confidentiality

Answer 39

* Relational * Hierarchical * Network * Object-oriented * Object relational

Answer 40

* LDAP * Windows registry

Answer 41

It's like a hierarchical database, but it allows each element to have multiple parent and child relationships. The network has to do with the relationship between the data elements, not the computer network.

Answer 42

* Objects can be created when needed and the data and procedure go with the object when it is requested * Does not use SQL

Answer 43

* An object-relational DB is a relational DB with a software front-end that is written in an object oriented programming language

Answer 44

* It separates data into components that run as middleware on a client or server. * It provides a low-level interface to link information across different databases and provides access to data no matter where located or how formatted * It's a replacedment for ODBC * It's COM based and therefore limited to Microsfot based tools * A dev accesses OLE DB services through ActiveX Data Objects (ADO) * It allows different applications to access different types and sources of data

Answer 45

* It's an API that allows applications to access back-end database systems * It's a high level data access programming interface to an underlying data access technology (such as OLE DB) * It's a set of COM objects for accessig data sources, not just databases * it allows a dev to write programs that access data without knowing how the DB was implemented * SQL commands are not required when using ADO

Answer 46

A central collection of data element definitions, schema objects and reference keys.

Answer 47

* Semantic integrity -- enforcing things like data types, logical values, uniqueness constraints * Referential integrity -- All foreign keys must tie back to primary keys that exist * Entity integrity -- guarantees that records are uniquely identified by primary key values

Answer 48

* **Savepoint** - used to make sure that if a system failure occurs, or an error is detected, the database can get back to a known point before the system crashed or hiccupped. * **Checkpoint** -- similar to savepoints. When a certain amount of memory is filled up a checkpoint is initiated, which saves data from the memory segment to a temp file. Used in case of a glitch

Answer 49

* **Aggregation** is when a user doesn't have clearance or permission to access specific information, but they can piece together the information they are looking for from the clues in other data that they do have access to * **Inference** is the intended result of aggregation. It's the ability to derive information not explicitly available

Answer 50

* **Content dependent access control** is based on the sensitivity of the data * **Context dependent access control** means that the software understands what should be allowed based on the state and sequence of the request * Used to protect against inference attacks

Answer 51

* **Cell suppression -**- hide specific cells that could be used in inference attacks * **Partitioning** -- by dividing the DB into different parts, it becomes harder for an unauthorized individual to connect the pieces together * **Noise and perturbation** --inserting bogus information in the hopes of misdirecting an attacker

Answer 52

* Polyinstantiation allows multiple rows with the same primary key, but distinguished by security level * Higher security will know that the Oklahoma is shipping weapons from Delaware to Ukraine * Lower security clearance will see that the Oklahome is shipping food to Africa By not having access prevented, lower security clearance will not know that something classified is happening

Answer 53

Polyinstantiation is a process of interactively producing more detailed versions of objects by populating variables with different values or other variables. It is often used to prevent inference attacks

Answer 54

* **Atomicity** -- all or nothing * **Consistency** - must follow integrity policy * **Isolation** - trans execute in isolation until complete and don't interact with other trans. Results not available until tran is complete * **Durabilty** -- once tran is verified as accurate it is committed and can't be rolled back

Answer 55

* **Data mining** is the process of massaging the data held in the data warehouse into more useful information. * **Metadata** is the result of storing data within a data warehouse and mining the data with tools * **Data** goes into the warehouse and metadata comes out of the data warehouse.

Answer 56

Knowledge Discovery in a database (KDD)

Answer 57

Big data deals with very large data sets with characteristics that make them unsuitable for traditional analysis techniques. * heterogeneity * complexity * variability lack of reliability * sheer volume

Answer 58

**Big data** is stored in specialized systems like **data warehouses** and is exploited using approaches such as **data mining.** The terms are related, but distinct

Answer 59

A behavior blocker allows malware to execute, but in a safe environment and it blocks things like: * scripting email messages to send executable code * modifying executable logic * Formatting a hard drive or writing to the boot sector

Answer 60

Heuristic detection: * analyzes the overall structure of the malicious code * evaluates the coded instructions and logic functions * assesses the likelihood of it being malicious * Has a "suspiciousness counter" * Once the threshold is met, the antimalware mechanisms jump into place * The big value of it is that it can detect new malware. It doesn't just rely on known signatures

Answer 61

* Behavior blocking * Heuristic detection

Answer 62

Datamart Datamarts are closely tied to data warehouses, but there is a distinct difference. Datamarts are a collection of data from different databases or systems that fulfill a specific need. Data warehouses are a collection of data from different databases or systems that could cover a wide variety of objectives. It is common for datamarts to be subsets of data warehouses.

Answer 63

A virus that makes copies of itself and changes those copies A polymorphic virus will reproduce like all viruses, but it will modify its children with the hopes that at least some of the children's (or copies') signatures will not be the same as the signature in the antivirus software product. The goal is self-preservation.

Answer 64

Digital signature ActiveX controls are software components and are digitally signed to prove where they came from and who developed them. ActiveX is platform dependent, meaning it runs only on Windows-based systems, and language independent, meaning the controls can be written in any programming language. Java uses bytecode and sandboxes; ActiveX does not.

Answer 65

Teardrop Teardrop attacks take advantage of weaknesses in some computer systems that are not able to handle packets not fragmented properly. Most of today's systems are no longer vulnerable to this type of attack.

Answer 66

A smurf attack involves spoofing the source IP address in a packet header, and then using it to bombard the victim's network with ICMP ECHO REQUESTs. The victim's network works as the amplifying network to increase the power of the attack.

Answer 67

Polyinstantiation is when one object is copied and the attributes of the second object are modified. Many times the copy of the object is also assigned a different security classification. This is done so that someone with a top secret clearance, for example, can read the data held within the original object. A person who has a slecret clearance may then only have access to the second object, which has different information. This protects the confidentiality of information at higher levels of security. As an example, it could be used to allow one object to have two security classifications

Answer 68

The act of compiling data from several databases so that the information may be better analyzed is called data warehousing. Data warehousing is a valuable tool that brings together several databases and compiles the different data into one data warehouse. The data can then be analyzed in different ways, which is called data mining.

Answer 69

Accreditation The accreditation process is the formal management approval of a system and the protection level it provides. Accreditation comes after the certification process.

Answer 70

Expert systems Expert systems use artificial intelligence and nonnumeric algorithms to solve complex problems that require human intelligence and intuition to solve. Expert systems can be used to provide intrusion detection capabilities by identifying patterns in network traffic and security logs.

Answer 71

Logic bomb A logic bomb contains code that performs an action triggered by a specific event or condition.

Answer 72

Gathering information and constructing private information from available resources Aggregation is the act of gathering available information from different sources, and inference is putting that data together and figuring out information that is not explicitly available. For example, if a user has access to only four fields in a ten-field database, she might access the data elements in those four fields and infer from that information what is held in one or more of the other six fields.

Answer 73

Open Database Connectivity (ODBC) is a standard that allows different types of applications to communicate with different types of databases. The applications send requests to the ODBC and it finds the necessary driver and sends the request to the database.

Answer 74

Split knowledge procedures Split knowledge procedures ensure that no one person possesses all the necessary steps for carrying out important tasks. It is a way of spreading the knowledge. A company is at risk if it relies too heavily on one employee for critical functions.

Answer 75

This type of trapdoor is usually invoked by a series of keystrokes or commands that will allow the programmer easy access to the program at a later date. Easter eggs are typically harmless code within programs that developers insert into the program for the sake of entertaining curious geeks. A trapdoor may also be called a maintenance hook.

Answer 76

OSMM For organizations that embrace open source software, the Open Source Maturity Model (OMSM) allows them to measure and improve the effectiveness of their processes. The focus is on both developing open source software and being part of the open-source software movement by developing it, using it and actively participating in the community.

Answer 77

ANN Artificial neural network (ANN) is a computer network that mimics the functionality of the brain. It has units that mimic neurons and that attempt to simulate thought so that it can learn from different experiences. The more that the ANN can learn, the better results it can present to the users of the system.

Answer 78

In the wild A slang term for viruses being sent to a public network is "in the wild." Just as wild animals are more dangerous than animals confined to a zoo, viruses on public networks are more dangerous than viruses "in the zoo," or in controlled environments.

Answer 79

Change management Change management is a systematic approach to deliberately regulating the changing nature of projects, including software development projects. It is a management process that takes into account technical issues, resources (like people and money), project lifecycle, and organizational climate.

Answer 80

Polymorphism Polymorphism exists within object-oriented programming applications. Objects are derived from different classes which make them respond differently to commands. So, when two objects, each in a different class, are presented with the same command, their class properties tell them how to respond. When they respond differently to the same command it is called polymorphism. The objects could come from the same class but inherit behaviors for different sub-classes.

Answer 81

Rule-based programming Rule-based programming is the basis for expert systems. A list of "if/then" statements is supplied to the system and it uses an inference engine to identify patterns and establish rules for the computer to follow.

Answer 82

ORB Platforms using the CORBA standards use object request brokers (ORBs) to allow two systems with different languages to communicate with one another. So, when one application sends a request to another application, the message first goes to the ORB. The ORB is responsible for knowing the location of the other application and sending the request to it.

Answer 83

Overwhelming a computer by sending multiple communication requests SYN attacks use up system resources by sending multiple communication requests to a computer until it can no longer process future communication requests. This is one example of a denial-of-service attack.

Answer 84

CGI Common Gateway Interface (CGI) is used in web sites that require a user to input information. CGI scripts or executables are used to translate, respond to request, build a new web page, and then send it to the user. The user is then presented with data based on her request.

Answer 85

Computer-aided software engineering (CASE) tools are useful to software developers by providing automation and increased speed of development procedures. CASE tools usually aid individuals by performing the redundant tasks that programmers, project managers, or analysts have to perform for each project.

Answer 86

No While penetration testing is an effective means of determining if vulnerabilities can be exploited, it does not examine the overall security impact of acquired software in terms of risk to the organization.

Answer 87

A pseudo-flaw is code inserted into an application or operating system with the sole purpose of trapping intruders who break into these systems.

Answer 88

Trojan horse Trojan horses are common attack methods used to spread malware. Once planted on a user's machine, they act in complete disguise. As a program is initiated, the Trojan horse begins to work, but the power in the malware is that it goes unsuspected by the user.

Answer 89

Statistical Data mining is also known as Knowledge Discovery in Database (KDD), which are techniques of identifying valid and useful patterns. Different types of data can have various interrelationships and the methods used depends on the type of data and patterns that are sought after. The following are three approaches used in KDD systems to uncover these patterns: **• Classification** — Data is grouped together according to shared similarities. **• Probabilistic** — Data interdependencies are identified and probabilities are applied to their relationships. **• Statistical** — Identifies relationships between data elements and uses rule discovery.

Answer 90

CGI Mobile code is small programs that can be transmitted as an e-mail attachment or by downloading from different web sites. Java applets, ActiveX, and active scripts are all considered mobile code. CGI is unrelated to mobile code, but instead is a web server interface technology.

Answer 91

DevOps Another way to think of an organization’s maturity (at least in terms of software development) is to consider how effective it is at integrating its development and operations teams (DevOps). This model is noteworthy in that it focuses on culture and people in addition to development and business issues.

Answer 92

Line disconnect Between the lines NAK attack

Answer 93

A tuple is a database term for a row. It is defined as a row in a relational database model representing a relationship among a set of values.

Answer 94

System design Trusted paths, data classifications, and possible Trojan horse vulnerabilities are part of the actual design of a system. The design of a system determines the level of integrity, confidentiality, and overall protection that the system can actually provide.

Answer 95

A smurf attack is when an attacker spoofs an ICMP broadcast packet and sends them to a network. This ICMP broadcast is sent to all systems on the network segment where the victim is located, and all nodes respond to the source address within the packet, which is the victim. This results in a DoS attack and can bring down the victim's system. The amplifying network is all the systems on the victim's local network segment.

Answer 96

Object-oriented databases are more dynamic than relational databases and the objects contain the procedures within them. An object-oriented database is more dynamic in nature when compared to a relational database because objects can be created when needed and the data and procedure go with the object when it is requested. In a relational database an application uses its procedures to obtain data from the database; the database does not actually provide procedures as object-oriented databases do. The object-oriented database has classes to define the attributes and procedures of its objects.

Answer 97

To test antivirus software detection and alerting configurations An EICAR test is used to test the configurations of an antivirus software package. Most antivirus products come with a benign file that the product will identify as a virus, the administrator can verify that the correct configurations have been made to treat the virus as needed, and the product will properly carry out some type of notification.

Answer 98

* One — Machine language * Two — Assembly language * Three — High-level language * Four — Very high-level language * Five — Artificial intelligence and natural language

Answer 99

**Worms** are self-contained programs, meaning they can operate independently. **Viruses**, on the other hand, require some type of application for reproduction. **Worms** reproduce by themselves while residing on a victim's computer.

Answer 100

In object-oriented programming, objects have a clear set of interfaces that other objects interact with. The other objects only need to know how to communicate to these interfaces, which reduces the complexity. This means that objects do not need to know or understand how another object works internally to be able to communicate with it.

Answer 101

Entity integrity Entity integrity is a rule in relational databases that dictates that each row must contain a unique primary key and that the primary key does not point to a null value.

Answer 102

Covert channels are ways that attackers can allow processes to use items for communication. The items were not developed to be used for communication purposes in this way. A covert channel is the act of using an unintended communication path to send and receive messages. An overt channel is using a communication path that was intended for communication.

Answer 103

Cookies HTTP is not a stateful protocol, meaning that it cannot remember individual users or connections. Cookies can be used to keep state on connections and are often used on web sites and for electronic transactions. Cookies may be persistent, meaning they stay on the user's hard drive, or may be dynamic and session-oriented, meaning they are destroyed when a session ends. If cookies store sensitive data, their contents should be encrypted.

Answer 104

Neural networks Neural networks are created to mimic the way human brains think, learn, and deal with different situations and data. They are put through different scenarios and the data inputted into the systems are weighted depending upon importance. Expert systems use knowledge bases with inference engines to identify patterns and relationships between different types of data, but they cannot learn through experience.

Answer 105

* Atomicity - Divides transactions into units of work and ensures that either all modifications take effect or none take effect. The changes are either committed or the database is rolled back. * Consistency — A transaction must follow the integrity policy developed for that particular database and ensure that all data is consistent in the different databases. * Isolation — Transactions execute in isolation until completed, without interacting with other transactions. The results of the modification are not available until the transaction is completed. * Durability — Once the transaction is verified as accurate on all systems it is committed and the databases cannot be rolled back.

Answer 106

The cleanroom development model is used to create critical applications. Strict testing procedures are followed throughout this approach to ensure no mistakes are made. This model is used to provide a very high quality product.

Answer 107

It improves software quality, reduces the life cycle of development, and provides better project management capabilities. Capability Maturity Model (CMM) describes procedures, principles, and practices that underline software process maturity. This model was developed to help software vendors improve their development processes by providing an evolutionary path from an ad hoc, "fly by the seat of your pants," approach to a more disciplined and repeatable approach that improves software quality, reduces the life cycle of development, provides better project management capabilities, allows for milestones to be created and met in a timely manner, and takes a more proactive approach versus the less effective reactive approach.

Answer 108

They combine data from several databases in a useful way to provide better analysis. Data warehouses combine and process data from multiple databases and data sources and present the information in useful ways for analytical and reporting needs. Data is normalized, meaning redundancies are stripped out, and then the data is usually mined to uncover relationships and patterns.

Answer 109

Fraggle is an attack similar to smurf, but instead of using ICMP, it uses User Datagram Protocol (UDP) as its transport protocol. The attacker broadcasts a spoofed UDP packet to the amplifying network, which in turn replies to the victim's system. The larger the amplifying network, the larger the amount of traffic that is pointed at the victim's system.

Answer 110

Project initiation

Answer 111

The first phase of a project life cycle is the project initiation phase. The following steps are commonly executed in this phase: • Decide on the definition or scope of the project. • Perform an initial risk analysis. • Assess threats and countermeasures. • Determine security objectives of the product that will be developed.

Answer 112

An air gap, air wall or air gapping is a network security measure employed on one or more computers to ensure that a secure computer network is physically isolated from unsecured networks, such as the public Internet or an unsecured local area network. It means a computer or network has no network interfaces connected to other networks, with a physical or conceptual air gap, analogous to the air gap used in plumbing to maintain water quality. **Air gapping the development,** test, and production environments ensures that code is protected and separated from the different stages of development.

Answer 113

Expert systems use: * **Knowledge bases**, which is a large amount of data extracted from experts within a specific field. * **Inference engines**, which create metadata from the data held within the knowledge base. * **Rule-based programming**, which is made up of "if/then" statements. A knowledge base engineer and subject matter expert work to fill the knowledge base with the necessary information that will be called upon by future users.

Answer 114

No. Reviewing customer requirements is a task completed in the second phase of software development—the functional design analysis and planning phase. Project initiation is the formal introduction of the project to all participating parties. The entire scope of the effort is overviewed and an initial risk analysis is performed. Customer's requirements are more granular issues than what is required in the first phase.

Answer 115

A multipartite virus A multipartite virus can be very damaging to a network and users. Because it goes after boot records and system files, it can be more destructive, affecting more areas of a system.

Answer 116

EJB dictates the interfaces that have to be implemented to allow different applications to communicate in a distributed environment. Enterprise JavaBeans (EJB) is a structural design for the development and implementation of distributed applications written in Java. EJB provides interfaces and methods to allow different applications to communicate across a networked environment.

Answer 117

Security requirements should be defined during the functional design analysis and planning phase of software development. This phase should result in a formalized, functional baseline which includes security tasks, test plans, and checkpoints.

Answer 118

It has access to privileged and non-privileged instructions. A processor can be executing applications in user mode, a lower privilege mode than supervisory mode (also called privileged mode). The processor will execute instructions in this mode to ensure that rogue code does not access sensitive and critical system resources. A processor can execute in supervisory mode. This usually takes place when a process of high system privilege sends a request to the processor. If the processor is in supervisory mode it has access to user-level (non-privileged) and supervisor (privileged) code.

Answer 119

DCOM Distributed Component Object Model (DCOM) is an architecture that allows objects within the different systems to communicate. It uses globally unique identifiers (GUIDs) to keep track of objects.

Answer 120

Security of test environment The three critical elements of securing the development process include securing development platforms, securing the code repositories, and ensuring solid software configurations. A test environment may not need to be as secure as other environments, such as development or production.

Answer 121

Logic bomb Logic bombs are types of malware that rely on some action by the user. In this instance, the action is the user trying to save the file. The logic bomb overrides the command and institutes a new set of instructions, which in this case, is to delete all files on the hard drive.

Answer 122

A mechanism used to take a copy of an object and repopulate it with different data or modify its characteristics in some way Polyinstantiation is an access control used mainly in databases to allow multiple rows to be tied to one primary key. Data can then be accessed in different ways and by different levels of users.

Answer 123

1. Initial — Development process is ad hoc or even chaotic. The company does not use effective management procedures and plans. No assurance of consistency and quality is unpredictable. 2. Repeatable — A formal management structure, change control, and quality assurance is in place. The company can properly repeat processes throughout each project. The company does not have a formal process model defined. 3. Defined — Formal procedures are in place that outline and define the processes carried out in each project. The organization has a way to allow for quantitative process improvement. 4. Managed — The company has formal processes in place to collect and analyze qualitative data and metrics are defined and fed into the process improvement program. 5. Optimizing — The company has budgeted and integrated plans for continuous process improvement.

Answer 124

Design specifications The system design specifications phase involves mapping components and procedures at a more granular level. The design phase provides a higher-level look and analysis of the project and product.

Answer 125

Expert systems are built on the foundation of human logic. The programs use a knowledge base that is filled with information from subject matter experts. The decision-making process involves "if/then" statements and an inference engine.

Answer 126

Design During the design phase, both attack surface analysis and threat modeling are used to further assess the security impact of developed software

Answer 127

Data mining helps to identify unusual or hidden patterns and relationships within databases. The results are represented to the user in a form called metadata. Metadata is data about data.

Answer 128

EICAR test An EICAR test is done with antivirus software by introducing a benign virus to test detection and reaction activities of the software.

Answer 129

SPMMM The Software Product Management Maturity Mod (SPMMM) focuses on the business issues surrounding the development of software products. For example, it considers issues like market conditions, product lines and portfolios, and partnering agreements.

Answer 130

Product is used within the intended environment. The product is not actually used in a production environment until the life cycle reaches the operations/maintenance phase. The acceptance testing/implementation phase leads to this next level, but certain tasks must be completed before the product can be used. Testing, certifying, and integration tasks must all be completed first to ensure the product functions properly and coexists with other network devices and software successfully.

Answer 131

Inference Polyinstantiation means that a copy of an object is made and the characteristics of the second object are modified in some way. Within databases this technique can be used to allow more than one row to contain the same primary key. The different rows contain data that resides at different security levels, thus the different rows have different classifications. This way when a subject accesses the database, only the row that matches his security clearance will be available. If this technique was not used when a subject attempted to access a row above his clearance, he would be told that the data is unavailable or that the he did not have the security rights to view it. This would allow low-level users to infer the existence of highly classified information.

Answer 132

The human brain Artificial neural networks (ANN) are built on the functionality of the human brain. The objective of the model is to allow systems to recognize patterns and learn from different situations. ANN uses small units that mimic human neurons. These are used to communicate with transmitters, which is how the learning process is carried out.

Answer 133

Request control The request control provides users with a framework to request changes and developers with the opportunity to prioritize those requests.

Answer 134

Waterfall The waterfall model uses a seven-stage approach to software development and includes a feedback loop that allows development to return to the previous phase to correct defects discovered during the subsequent phase.

Answer 135

Content-dependent

Answer 136

**Foreign keys** are used to enforce referential integrity constraints between tables that participate in a relationship.

Answer 137

Expert systems use a knowledge base consisting of a series of “if/then” statements to form decisions based on the previous experience of human experts.

Answer 138

**ODBC** acts as a proxy between applications and the backend DBMS.

Answer 139

Contamination Contamination is the mixing of data from a higher classification level and/or need-to-know requirement with data from a lower classification level and/or need-to-know requirement.

Answer 140

Configuration audit Configuration audit is part of the configuration management process rather than the change control process.

Answer 141

The **_cardinality_** of a table refers to the number of rows in the table while the **_degree_** of a table is the number of columns.

Answer 142

APT - Advanced Persistant Threat Advanced persistent threats(APT) are most closely associated with zero-day attacks.

Answer 143

LastPass is a tool that allows users to create unique, strong passwords for each service they use without the burden of memorizing them all.

Answer 144

The single quote character (') is used in SQL queries and must be handled carefully on web forms to protect against SQL injection attacks.

Answer 145

Stored procedures Developers of web applications should leverage database stored procedures to limit the application’s ability to execute arbitrary code. With stored procedures, the SQL statement resides on the database server and may only be modified by database administrators.

Answer 146

Reflected Input Cross-site scripting attacks are successful only against web applications that include reflected input. Reflected Input Example - a simple web application that contains a single text box asking a user to enter their name. When the user clicks Submit, the web application loads a new page that says, “Hello, name.”

Answer 147

Input validation nput validation prevents cross-site scripting attacks by limiting user input to a predefined range. This prevents the attacker from including the HTML

Answer 148

Back door Back doors are undocumented command sequences that allow individuals with knowledge of the back door to bypass normal access restrictions.

Answer 149

* **Cross-site scripting** uses reflected input to trick a user’s browser into executing untrusted code from a trusted site. * **Cross-site request forgery (XSRF or CSRF)** attacks exploit the trust that sites have in a user’s browser by attempting to force the submission of authenticated requests to third-party sites.

Answer 150

No. Software threat modeling is designed to reduce the number of security-related design and coding flaws as well as the severity of other flaws. The developer or evaluator of software has no control over the threat environment, because it is external to the organization.

Answer 151

The log entries would show the characteristic pattern of a port scan. The attacking system sends connection attempts to the target system against a series of commonly used ports.

Answer 152

Aggregation Aggregation is a security issue that arises when a collection of facts has a higher classification than the classification of any of those facts standing alone. An inference problem occurs when an attacker can pull together pieces of less sensitive information and use them to derive information of greater sensitivity.

Answer 153

Timing and storage The two major classifications of covert channels are timing and storage. A covert timing channel conveys information by altering the performance of a system component or modifying a resource’s timing in a predictable manner. A covert storage channel conveys information by writing data to a common storage area where another process can read it.

Answer 154

It will not fail. Keep this in mind for transactions. There won't be an update, but the transaction will go on to a subsequent steps and it could complete successfully.

Answer 155

Fail open A fail open configuration may be appropriate in this case. In this configuration, the firewall would continue to pass traffic without inspection while it is restarting. This would minimize downtime, and the traffic would still be protected by the other security controls described in the scenario. Failover devices and high availability clusters would indeed increase availability, but at potentially significant expense. Redundant disks would not help in this scenario because no disk failure is described.

Answer 156

Pass around reviews are often done via email or using a central code review system, allowing developers to review code asynchronously.

Answer 157

Functional requirements

Answer 158

This is an example of a specific type of buffer overflow known as an off-by-one error. The first line of the code defines an array of 10 elements, which would be numbered 0 through 9. The second line of code tries to place a value in the 11th element of the array (remember, array counting begins at 0!), which would cause an overflow.

Answer 159

Lost update Lost updates occur when one transaction writes a value to the database that overwrites a value needed by transactions that have earlier precedence, causing those transactions to read an incorrect value.

Answer 160

* **Transport Layer Security (TLS) provides the most effective defense against session hijacking because it encrypts all traffic between the client and server, preventing the attacker from stealing session credentials.** * Secure Sockets Layer (SSL) also encrypts traffic, but it is vulnerable to attacks against its encryption technology. * Complex and expiring cookies are a good idea, but they are not sufficient protection against session hijacking.

Answer 161

x When a system uses shadowed passwords, the hashed password value is stored in /etc/shadow instead of /etc/passwd. The /etc/passwd file would not contain the password in plaintext or hashed form. Instead, it would contain an x to indicate that the password hash is in the shadow file. The \* character is normally used to disable interactive logins to an account.

Answer 162

SQL injection The single quotation mark in the input field is a telltale sign that this is a SQL injection attack. The quotation mark is used to escape outside of the SQL code’s input field, and the text following is used to directly manipulate the SQL command sent from the web application to the database.

Answer 163

No. Client-side input validation is not an effective control against any type of attack because the attacker can easily bypass the validation by altering the code on the client. What is effective? * Escaping restricted characters prevents them from being passed to the database * Parameterization. * Limiting database permissions prevents dangerous code from executing.

Answer 164

Intercepting read requests from the antivirus software and returning a correct-looking version of the infected file.

Answer 165

In URL encoding, the . character is replaced by %252E and the / character is replaced by %252F. You can see this in the log entry, where the expected pattern of ../../ is replaced by %252E%252E%252F%252E%252E%252F.

Answer 166

Persistent XSS Attacks where the malicious user tricks the victim’s web browser into executing a script through the use of a third-party site are known as cross-site scripting (XSS) attacks. This particular attack is a persistent XSS attack because it remains on the discussion forum until an administrator discovers and deletes it, giving it the ability to affect many users.

Answer 167

Knowledge bank and inference engine

Answer 168

In a gray box test, the tester evaluates the software from a user perspective but has access to the source code as the test is conducted.

Answer 169

* Input Parameters * Code * Supporting infrastructure

Answer 170

1. Decomposing the application 2. Determining and ranking threats 3. Determining countermeasures and mitigation

Answer 171

A. Initiating B. Diagnosing C. Establishing D. Acting

Answer 172

Waterfall Despite many organizations moving to Agile, DevOps, or other more responsive development methodologies, Waterfall remains a strong contender when clear objectives and stable requirements are combined with a need to prevent flaws and to have a high level of control over the development process and output.

Answer 173

Repeatable

Answer 174

* **Dirty reads** occur when one transaction reads a value from a database that was written by another transaction that did not commit. * **Lost updates** occur when one transaction writes a value to the database that overwrites a value needed by transactions that have earlier precedence, causing those transactions to read an incorrect value. * **Incorrect summaries** occur when one transaction is using an aggregate function to summarize data stored in a database while a second transaction is making modifications to the database, causing the summary to include incorrect information.

Answer 175

MBR A master boot record (MBR) virus redirects the boot process to load malware during the operating system loading process.

Answer 176

Parameterization can help avoid SQL injection. Note that each parameter has a placeholder, which is then passed to the query.

Domain 8 -- Software Development Security Flashcards

(207 cards)