(ISC)² ® CSSLP Domain 4: Secure Software Implementation
InfosecTrain · InfosecTrain
Audio is streamed directly from the publisher (anchor.fm) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
Domain 4: Secure Software Implementation (14%)
The fourth domain of the CSSLP certification exam is a secure software implementation, and the domain comprises 14% exam weightage. This domain covers the most significant security challenges and concerns for developers to consider while writing code. This domain explains declarative vs. mandatory (programmatic) security, Sanitization of output (encoding, obfuscation), Auditing and logging in a secure manner, Dynamic Application Security Testing (DAST), and Interactive Application Security Testing (IAST), Compiler switches, and address compiler warnings.
The CSSLP certification exam’s fourth domain covers the following subtopics:
- Adhere to relevant secure coding practices
- Analyze code for security risks
- Implement security codes
- Address security risks
- Securely reuse third-party code or libraries
- Securely integrate components
- Apply security during the build process