Questions to be answered:
1. When should data be encrypted?
-
What are some possible ways that we can ensure the third-party components we use are secure? How can we minimize risk in this area?
-
Where should you store your application’s secrets? How should your application access your secrets?
-
Name three types of “secrets.”
-
What are some of the potential threats that a mobile banking application would face? Name three threats and rate how likely they are and how damaging they are based on a scale of low, medium, and high.
-
Name three threats that could apply to a “smart” car. Rate the threats (low, medium, or high) in terms of likelihood and potential damage.
-
Name five different types of security functionality that would potentially be offered in a modern framework.
https://www.amazon.ca/Alice-Bob-Learn-Application-Security/dp/1119687357