From the course: Programming Foundations: Secure Coding

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Embrace security in design

Embrace security in design

From the course: Programming Foundations: Secure Coding

Start my 1-month free trial

Embrace security in design

- As we begin talking about culture changes around secure coding, I think it is only fitting to talk first about the point where most developers begin their engagement, and that is the design. Design is a great place to start looking at ways to make your application more secure for various reasons, but I want to focus on some strategies for how to take security into account during design. I like to start all of my design activities by looking at the system design. Whether it's a complete system in waterfall or a simple feature in Scrum, the system itself is key. By looking at what you are building, you can start looking at ways to destroy it, and that is in my opinion one of the greatest assets for a secure developer. I feel very strongly that developers struggle with security because they are trying to build, not tear down. Good security people learn how to tear down systems. They learn how to exploit features to attack the system. This is what you should aim for in design. Look at…

Contents