Difference between security software and software security

Difference between security software and software security

Security software is the term used to refer to software like anitivirus, intrusion detection programs, encryption packages, anti-spyware programs, etc. Generally, these are the computer programs that are used to provide some form of security to the device being protected. The protection being mentioned here are from malicious software (i.e virus, worm, spyware) or persons (i.e hackers, crackers).

Software security means the practice of making software more secure. This is the term used to explain the overall measures that can be taken while developing a software to ensure security of the software itself. The purpose of software security is to reduce or to prevent design flaws, vulnerabilities, exceptions in security policy, etc. Security in question here is not only about the functionality but it is about the assurance that the software will do what it is expected to do. Similarly, it should not do what it is not expected to do.

Secure Software - Architecture & Design

Secure Software - Architecture & Design

The architecture and design phase is looked as the most important phase of the SDLC, when it is looked at from the security point of view. Decisions that are made during this phase play a huge role in the security of a software. If good decisions are made, it will give a structure which is more resilient and resistant to malicious attacks. This will also provide a good guide in decision-making for the subsequent phases. On the other hand, if bad decisions are made, the result can be very damaging - design flaws and weaknesses against attacks.

What are the objectives of Software Architecture & Design?

The main objectives are that the software must be complete, stable, flexible, extensible and scaleble.
Com-Sta-Fle-Ext-Sca (Comsta flexsca)

What are the security-specific objectives of Software Architecture & Design?

The main objectives are

• Comprehensive functional security architecture
• Resistance to attack
• Tolerance to attack
• Resilience to attack

A note

It has been reported in various publications that many of the defects that result in security vulnerabilities of a software are caused by flaws in the architecture and design of the software itself.

The goal of building security in Architecture & Design phase of SDLC

To significantly minimize the number of flaws as early as possible.