9.22--CAESARII Edition: Learn Something New

Thread Content

9.22--CAESARII Edition: Knowledge Boost. Those who answer correctly gain 10 wealth points, while those who answer incorrectly gain 3 wealth points. The concept of software security assurance involves applying risk management principles throughout the entire lifecycle of a software, aiming to achieve the best possible level of protection within limited resources. This helps to avoid direct losses resulting from inadequate safeguards; at the same time, it is also important to be aware of the indirect losses that can arise from excessive safeguards. Among the following software security development strategies, the one that does not conform to the principles of software security assurance is: ( ) Conducting comprehensive security testing on the software before it is deployed, including source code analysis, fuzz testing, and penetration testing; software that has not undergone such testing is not allowed to be put into use. During the software security design phase, inviting experts in software security development to review the software architecture design in order to identify any security shortcomings as early as possible. Ensuring that software developers receive security training so that they understand the basic principles and methods of secure coding, thereby enabling them to write secure code. Taking into account the costs related to software security at the stage of project initiation, with funds allocated for security testing and security reviews, to ensure that these security-related expenses are covered&