From the course: ISC2 Certified Secure Software Lifecycle Professional (CSSLP) (2023) Cert Prep

Unlock the full course today

Join today to access over 24,400 courses taught by industry experts.

Component-based systems

Component-based systems

From the course: ISC2 Certified Secure Software Lifecycle Professional (CSSLP) (2023) Cert Prep

Start my 1-month free trial Buy for my team

Component-based systems

“

- [Instructor] Most application architectures rely on multiple, interconnected components that fit together like puzzle pieces, and if those puzzle pieces don't fit together securely, apps built on those architectures could be exposed to compromise. Those components might include pieces of software, web services, web resources, and even interchangeable software modules. An example of a component-based system would be a web application that includes APIs that are accessible to end users. It might also import other data feeds from around the web to provide more context around the data it processes and stores. More often than not, attackers are less interested in your application than they are in the data processed and stored by your apps. That's why one of the most prominent security concerns with component-based systems is where and how you store that data. If your application permits client-side storage or network-attached storage, then you'll want to be a little more diligent…

Contents