Some companies build their own software. Others outsource software development by hiring contractors or other companies to build software they need. When we need to build new custom software, is ...
Since it's been requested that this question be rewritten: Is SSL (or some other encryption equivalent) required in the below case? From a small local business website, is there any damage that an ...
If you are specifying requirements that a certain classification of data be encrypted while at rest (on storage), should the requirement be considered met if the data is stored on an live (turned on) ...
What does a good security requirement for an application look like? I am talking about functional as well as non-functional security requirements here. For traceability reasons I consider it ...
I need to design a state machine model to solve conflict of interest in computer security. [I know Chinese wall model but it is an information flow model] Are there any such existing models? Any ...
To ensure secure development in the off shore team what are considerations to be taken into account in the SLA? I got this as a reference: ...
Many approaches exist to define security requirements. To keep it simple, i would say to define a security requirement, one need to model the threat encountered when building up misuse cases for ...
How to define security requirements to ensure that developers… do not provide security by obscurity?
I tried to explain that security by obscurity should not be used but let's say I was challenged! I received the answer to list the known security by obscurity that I know, as a kind of bad practice ...
If I'm running a website that, say, takes a survey, must I protect user data from disclosure if the users are informed initially that it's insecure? I'm not storing financial data or social security ...