From the course: ISC2 Certified Secure Software Lifecycle Professional (CSSLP) (2023) Cert Prep

Unlock the full course today

Join today to access over 24,400 courses taught by industry experts.

Security in the build process

Security in the build process

From the course: ISC2 Certified Secure Software Lifecycle Professional (CSSLP) (2023) Cert Prep

Start my 1-month free trial Buy for my team

Security in the build process

“

- [Instructor] Once your application is ready to move from development to production, there are additional controls you can apply during the build process to bolster the security of your application. These controls are referred to as anti-tampering techniques. Anti-tampering techniques are designed to harden applications against exploitation by building safeguards when the application is compiled. These safeguards analyze how an app does things like right data to and from memory, and then they report on any code where an attacker might be able to hijack that action. Anti-tampering techniques can also make it harder for an attacker to reverse engineer an application back to its original source code. As a CSSLP, there are a few anti-tampering techniques that you're likely to use on a regular basis. One of those techniques is code signing. This technique uses cryptography to generate a unique digital signature and apply that signature to your application. If your original signature…

Contents