Software security

Done by:Shoxrux Usmonov
checked by:olimov iskandar

Software security
1-assignment


Theme: Using cryptographic ways while protecting softwares
If you are building software without having any concern about the security aspects of the software, it will be like building your own house without locks on the doors and windows. So every Software Engineer needs to get an idea about the ways we can secure our applications.
When it comes to Secure Software development, it is broadly classified into two parts as Application Security and Software Security.

• 
  Application Security: A way to defend against software exploits after the deployment is complete.
  
• 
  Software Security: A way to defend against software exploits by building the software to be secure. (build security into the software)
  

To avoid security threats in the software development process different strategies are used. Two of the basics strategies are Vulnerability Testing and Penetration Testing. Vulnerability testing is the process of identifying and quantifying vulnerability in an environment. In other words, it is the process of evaluating security risks in software systems to reduce the probability of threats. Penetration testing is the simulating the action of an external or internal attacker that aims to breach the security of the software. Some of the issues with the security breaches are immediate financial loss, reputation loss, and lawsuits. When we consider the types of security attacks, it is categorized as leakage, tampering, resource stealing, vandalism, and denial of service.

• 
  Leakage: Information leaving the system.
  
• 
  Tampering: unauthorized information altering.
  
• 
  Resource Stealing: illegal use of resources.
  
•