From the course: Cloud Data, Platform, and Applications Security by Pearson
Unlock this course with a free trial
Join today to access over 25,200 courses taught by industry experts.
Cloud development
From the course: Cloud Data, Platform, and Applications Security by Pearson
Cloud development
Let's begin this lesson comparing Application Security by Design to Application Security by Default and Security by Deployment. Now with Security by Design, the program or the application or the app is constructed with security integrated into every phase of the software development lifecycle, whether it's a traditional NIST, SDLC, or maybe you're using Agile or Spiral, or CICD at Amazon Web Services, the bottom line is the attackers cannot easily overcome the security controls, even with full insight or white box into the application design and lifecycle. With security by default, design deliberation is assuming that the application is natively secure without any modifications or extra controls. Security by Default is heavily dependent upon infrastructure as code using containerization and reusable microservices. With Security by Deployment, the application is released into an environment where security is highly considered in the networks and the system, for example into a…
Contents
-
-
-
-
-
-
-
-
(Locked)
Module introduction1m 25s
-
(Locked)
Learning objectives32s
-
(Locked)
Cloud application architecture elements10m 1s
-
(Locked)
Cloud development6m 9s
-
(Locked)
SDLC business requirements and phases8m 56s
-
(Locked)
Common software vulnerabilities5m 55s
-
(Locked)
Software threat modeling methods8m 53s
-
(Locked)
Secure coding methodologies5m 48s
-
(Locked)
Software configuration management and versioning4m 46s
-
(Locked)
-
-
-