1Training Tips to Help Developers Snag Security Gold
2Analyze and Understand Application Vulnerabilities
An athlete wouldn’t attempt a course or routine without assessing potential risks first. So companies at the very least need to make sure threat modeling involves decomposing the application to understand the application and how it interacts with outside entities, determine risks accordingly, deem mitigation strategies and implement countermeasures.
3Open Source Can Pose a Threat
4Keep Your Frameworks Up to Date
5Start With Security for a Smoother Build
An Olympian athlete wouldn’t wait until the day of competition to assess any potential issues that could arise as he or she competes. For companies, it should be the same mentality when identifying both generic bugs and security bugs to eliminate vulnerabilities. The sooner they get fixed in the development process, the better to avoid additional issues—not to mention it’s less expensive to fix earlier in the cycle.
6Keep Communication Open Through a Collaboration Platform
7Measure Progress With Benchmarks
8Server-Level Code Verification Ensures Integrity
Don’t assume the input is ever varied or has not been manipulated. Keeping business logic code verification on the server allows you to ensure the proper input sanitation without the concern of input manipulation. In much the same way, many athletes track their performance to uncover the factors behind their success and failures.
9Make App Security a Matter of Black and White(listing)
10Prepared Statements: Not Just for Public Relations
Once an athlete is caught making a certain facial expression or utters a particular statement, there isn’t anything he or she can do to take it back—former U.S. Olympic gymnast McKayla Maroney can tell you that firsthand. Ensure that an adversary cannot change a query’s intent, thus reducing the risk of an SQL injection, by using prepared statements.
11Don’t Be Afraid to Break Your Build
If a test comes back with major issues, it’s time to break the build and make sure those vulnerabilities are fixed before the next step. In the same way, Olympic athletes address flaws in their performance prior to competing. Don’t wait until 2020 to test out these tips—stay ahead of the competition and make your next move the most secure one yet.