From the course: CSSLP Cert Prep: 4 Secure Software Implementation

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Data flow security

Data flow security

From the course: CSSLP Cert Prep: 4 Secure Software Implementation

Start my 1-month free trial

Data flow security

- [Instructor] By understanding how data flows through your app, you can build those flows in a way that reduces the likelihood of compromise. Your conversations around data flow security should start with an in-depth discussion around potential concurrency risks. Your developers will be creating applications designed to handle multiple users at the same time. When those users start vying for access to the same resources, you may run into concurrency issues. Concurrency is the idea that your app can enable multiple users to access the same thing simultaneously, ideally without breaking anything and without violating any integrity controls. Fortunately, the database your Dev team chooses will likely have some native concurrency controls built into the technology. These controls often revolve around locking data, although there's more than one way to go about this. Pessimistic locking refers to locking an object the whole time…

Contents