Question

In 2-3 pages, develop a Secure Application Development Procedure which addresses each of the OWASP Top Ten Vulnerabilities. Make sure to address the following:

• Software Development Processes
• Secure Coding Techniques
• Application Configuration Techniques
• Web Server Configuration Techniques

Answer 1

Software Development Processes

-------------------------------------------------

• Every software development process is divided into some stages to reduce the work pressure to a particular person and to share the work among all the workers
• The stages involved are Requirement gathering,Analysis,Implementation,Coding,Testing,Deployment phases
• These are done by various stakeholders by using some techniques to accomplish those tasks
• The phases are completed one by one and we just cannot skip to the other phases without completing the beginning phases

Secure Coding Techniques

---------------------------------------

• Balancing the time and quality to get a good software
• Code reusability should be maintained
• Testing plays vital role in prevention of bugs
• Network connection failures must be handled
• Avoid default messages
• Documentation of inputs

Application Configuration Techniques

• Minimize attack surface
• Consistency is mandatory
• Using of packet capture tools
• Verification of framework's configuration file
• Encryption of data

Web Server Configuration Techniques

• Remove unnecessary modules
• Hide weak ciphers
• Stay active
• Restrict access to specific IP
• Disable sensitive information like signature, HTTP request tracing option etc.