Security – TC1019 Fall 2016

Sinse we have discussed different topics about software we haven´t had the chance to discuss about Software Maintenance.

We mention this in SDLC, did you remember this?

Maintenance is an important part of the Software process. This refers to keep tracking all the upgrades, updates and changes a code or software experiments and keep developing on them. We have also mentioned how Open Source Software makes life of some developers easier. And maintenance is agood example of and advantage of Open Source as we comented before.

But, this maintenance has a cost, the most elevated of the SDLC process.

: Original at: https://www.tutorialspoint.com/

The maintenance can be done due to the need of upgrade, the chance to make more reliable or efficient the product or for bugs appeared.

IEEE provides a framework for sequential maintenance process activities. It can be used in iterative manner and can be extended so that customized items and processes can be included.

: Original at: https://www.tutorialspoint.com/software_engineering/

Identification – identification of requirement of modification or maintenance.
Analysis – The modification is analyzed for its impact on the system including safety and security implications.
Design – New modules, which need to be replaced or modified, are designed against requirement specifications set in the previous stage.
Implementation – The new modules are coded with the help of structured design created in the design step.Every programmer is expected to do unit testing in parallel.
System Testing – Integration testing is done among newly created modules. Integration testing is also carried out between new modules and the system. Finally the system is tested as a whole, following regressive testing procedures.
Acceptance Testing – After testing the system internally, it is tested for acceptance with the help of users.
Delivery – After acceptance test, the system is

Continue reading "SW Maintenance" →

: Original image from: https://www.jpao.es/wp-content/uploads/2015/10/seguridad.jpg

Have you ever wondered why or who makes the little padlock in the url bar before the url of a web page?

Let´s be a little objective, related with one of my pasts post I touched the topic of doing software engineering with an ACM code of ethics for Sofware Engineering. Allright then, one of the principal areas disscussed then were about the rights of the end user and the professional.

Today we are going to talk about the security certificate, what are they and if you can trust one.

Thanks in advance to United States Computer Emergency Readiness team at: https://www.us-cert.gov/ncas/tips/ST05-010

What are web site certificates?

If an organization wants to have a secure web site that uses encryption, it needs to obtain a site, or host, certificate. There are two elements that indicate that a site uses encryption (seeProtecting Your Privacy for more information):

a closed padlock, which, depending on your browser, may be located in the status bar at the bottom of your browser window or at the top of the browser window between the address and search fields

a URL that begins with “https:” rather than “http:”

By making sure a web site encrypts your information and has a valid certificate, you can help protect yourself against attackers who create malicious sites to gather your information. You want to make sure you know where your information is going before you submit anything (see Avoiding Social Engineering and Phishing Attacks for more information).

If a web site has a valid certificate, it means that a certificate authority has taken steps to verify that the web address actually belongs to that organization. When you type a URL or follow a link to a secure web site, your browser

Continue reading "About Security certificates" →