Fundamentals of Secure Software - Introduction to Application Security

Derek Fisher, head of product security at Investnet, introduces the Software Development Life Cycle (SDLC) and its phases: requirements, design, implementation, testing, and evolution. He emphasizes the importance of client interaction, prioritization, and resource allocation. Fisher also discusses the integration of security into the SDLC, including threat modeling and vulnerability management, and highlights various testing methods such as static and dynamic analysis.

What are the core principles that are part of the Software Development Life Cycle (SDLC)?

Describe the requirements phase in the SDLC.

What is the importance of prioritizing requirements in the SDLC?

Explain the role of testing in the software development process.

How does security fit into the SDLC?

What is threat modeling and when is it performed in the SDLC?

What steps should be taken if vulnerabilities are found in production?