Write a short summary on Software development security, Malicious code and Application attacks.. Solution SOFTWARE DEVELOPMENT SECURITY: Security Development Lifecycle (SDL) is a software development security assurance process consisting of security practices. The SDL consists of the following stages: Requirements gathering Design Coding Testing Deployment Every stage of SDL will stress security over and above the existing set of activities. Coming to the detailed explanation regarding the security terms at each stage in the software development lifecycle are as follows: 1. Requirement Gathering : 2. Design 3. Coding 4. Testing 5. Deployment Depending on the scope of the system we can also perform traing ,incident response etc.... MALICIOUS CODE: Malicious code, the term used to describe any code in any part of a software or script, intended to cause undesired effects, security breaches or damage to a system. Malicious code describes broad category of system security terms that includes attack scripts, viruses, worms, Trojan horses(is a piece of code which is used to hack into a computer by misleading users of its true content), backdoors(Backdoors may be created with malicious intent, to gain access to confidential company or customer information) and malicious active content. Malicious code can take the form of: Malicious code can also cause network and mail server overload by sending email messages, stealing data and passwords, deleting document files, email files or passwords and even reformatting hard drives. APPLICATION ATTACKS: The application attacks are categorised into the following: 1. Input validation : Including the threats/ attacks like 2. Software Tampering 3. Authentication 4. Authorization 5. Configuration management 6. Sensitive information 7. Session management 8. Cryptography 9. Parameter manipulation 10. Exception management 11. Auditing and logging the above is about the software development security, malicious code and application attacks. .

1. Write a short summary on Software development security, Malicious code and Application
attacks..
Solution
SOFTWARE DEVELOPMENT SECURITY:
Security Development Lifecycle (SDL) is a software development security assurance process
consisting of security practices.
The SDL consists of the following stages:
Requirements gathering
Design
Coding
Testing
Deployment
Every stage of SDL will stress security over and above the existing set of activities.
Coming to the detailed explanation regarding the security terms at each stage in the software
development lifecycle are as follows:
1. Requirement Gathering :
2. Design
3. Coding
4. Testing
5. Deployment
Depending on the scope of the system we can also perform traing ,incident response etc....
MALICIOUS CODE:

2. Malicious code, the term used to describe any code in any part of a software or script, intended to
cause undesired effects, security breaches or damage to a system.
Malicious code describes broad category of system security terms that includes attack scripts,
viruses, worms, Trojan horses(is a piece of code which is used to hack into a computer by
misleading users of its true content), backdoors(Backdoors may be created with malicious intent,
to gain access to confidential company or customer information) and malicious active content.
Malicious code can take the form of:
Malicious code can also cause network and mail server overload by sending email messages,
stealing data and passwords, deleting document files, email files or passwords and even
reformatting hard drives.
APPLICATION ATTACKS:
The application attacks are categorised into the following:
1. Input validation : Including the threats/ attacks like
2. Software Tampering
3. Authentication
4. Authorization
5. Configuration management
6. Sensitive information
7. Session management
8. Cryptography
9. Parameter manipulation
10. Exception management
11. Auditing and logging
the above is about the software development security, malicious code and application attacks.