Security in coding phase of SDLC

Abstract

Deployed software is continuously under attack. Hackers have been exploiting vulnerabilities for decades and seem to be increasing their attacks. Firewalls, intrusion detection and antivirus systems simply cannot solve this problem. Only a concerted effort by the software development community to produce more robust and reliable applications can foil attackers and allow users and stakeholders to feel confident that they are protected from exploitation. It is crucial that each phase of the software development process includes the appropriate security analysis, defenses and countermeasures that results in more secure released code. From requirements through design and implementation to testing and deployment, security must be integrated throughout the Software Development Lifecycle (SDLC) in order to provide the user community with the best, most secure software. This paper describes that what actions may be taken for integrating security in coding phase.