Designing Secure Software

Part 1 questions

3. What are the risks associated with directly executing user input? What are the minimum steps needed to parse user input before it is allowed to be used in execution?

5. What are the risks associated with inheritance in classes? Why are generic classes both useful and dangerous in programming?

8. Why should input that is not used in processing never be allowed to stay on the input stream?

10. What are the considerations of security you should include in planning which programming language to use in software development?

 

Part 2

memo

Your manager is quite impressed with the security considerations you explained to her thus far; however, she asks that you give further thought to additional security measures where possible, and to develop a memo citing those additional safeguards. Complete the following assignment:

Write a ½ page memo describing additional security considerations you would add to a requirement definition in addition to those outlined in Chapter 7.

Feel free to utilize outside (online) sources to expand your list of necessary security measures.

Be sure to cite any sources.

Your memo should be professionally written and should not simply be a restating or paraphrasing of the sources researched or the textbook. It should be a personal view of the issue and your ideas on how to avoid them.

 

Part 3

Construct HTML forms in conjunction with PHP

It’s time to practice creating your own form and the PHP script to handle it. Create a new HTML form that that your guests can fill out as an RSVP form to your graduation party. Make sure that the form includes, your guest’s name, contact information, number of people in their party and any other information that you may want to capture. Create the PHP script that handles the form and displays the data on a webpage.

Zip all files associated with your RSVP form and submit the zipped file.