Secure Software Design

Secure Software Design
Secure Information Design
1

Secure Software Design
Question- Explain at least 3 ways that poor software design results in security flaws that
will present increasing cost>2. Explain the difference between functional and
nonfunctional requirements and how each category is identified.
Solution
A good software design not only helps in providing the good functionalities to the application
but also provides high level of security to the application. The ways that poor software design
results in security flaws that will present increased cost are as follows-
 Poor software design creates many bugs – These bugs not only creates hurdles in
functioning of the software functionalities but also create problem in security like if the
bug is there in login page or in authentication system then it creates many security
problems. According to the rule of software engineering the cost of rectifying the bugs is
three times higher in comparison to release of the application.
 Poor software design is prone to malware attack easily- The software which does not
have the proper software design is also prone to the attack of the malware easily. The
poor software design does not provide proper facility for handling the malware attack,
these designs does not provide facility to secure the application from various types of
malware automatically, even these applications does not provide any alert message that
the application has been infected with malware. This obviously creates high increased
cost as the elimination of these malware requires extra concentration and cost to bear.
 Poor software design also raises chances of hacking of the application- The poor
software designed application also raises the chance of hacking especially in case of web
applications. These applications lead to the data breach through system control hacking
and other cyber attack activities. In fact the biggest risk of the poor software design is the
hacking of the application. A good software design is designed by considering all the
possible security problems and can cause many problems in the application. It also
provides the scope of changing the design of the application according to the
requirements and expected changes easily.
2