Developing resilient code for business applications is critically important to ensure continued mission success by defending against the exploitation of new software vulnerabilities that can be leveraged by attackers to disrupt organizational stability. Ensuring that newly developed code is free from exploitable vulnerabilities contributes to mission resilience by reducing an organization’s overall attack surface. By reducing the total attack surface across an enterprise’s digital inventory, an organization is effectively making it more difficult for an attacker to exploit and retrieve sensitive organizational assets. This makes ensuring that cybersecurity requirements, principles, and tools are implemented across the application’s System Development Life Cycle (SDLC), a top priority for development teams that are looking to defend their organization from malicious adversaries. In this ICIT Fellows’ Perspective Essay, Dr. Darren Death explains that a developer can implement the following mechanisms to ensure that their application code is free from exploitable vulnerabilities:
- The Integration of Cybersecurity Throughout the SDLC;
- The Application of Best Practices and Standards;
- Static Code Analysis;
- Dynamic Code Analysis
Publishing URL: https://www.icitech.org/post/icit-fellow-perspective-integrating-cybersecurity-into-the-application-development-lifecycle