From the course: Cloud Data, Platform, and Applications Security by Pearson

Unlock this course with a free trial

Join today to access over 25,200 courses taught by industry experts.

Cloud development

Cloud development

Let's begin this lesson comparing Application Security by Design to Application Security by Default and Security by Deployment. Now with Security by Design, the program or the application or the app is constructed with security integrated into every phase of the software development lifecycle, whether it's a traditional NIST, SDLC, or maybe you're using Agile or Spiral, or CICD at Amazon Web Services, the bottom line is the attackers cannot easily overcome the security controls, even with full insight or white box into the application design and lifecycle. With security by default, design deliberation is assuming that the application is natively secure without any modifications or extra controls. Security by Default is heavily dependent upon infrastructure as code using containerization and reusable microservices. With Security by Deployment, the application is released into an environment where security is highly considered in the networks and the system, for example into a…

Contents