Usalama wa programu ni kufanya kazi ya kuunga mbegu ya programu kutokana na maadhimisho — kuunda na kubaki programu ili zistahimili maadhimisho, kulinda data, na kusoma kwa usalama. Umuhimu wake kwa sababu mvua ya usalama ina athari kubwa: wizi wa data, hasara ya fedha, na imani iliyoharibika.
Usalama wa programu unayofunika
App security = protecting software and its data from threats throughout the lifecycle:
→ secure CODING (avoid vulnerabilities like injection, XSS)
→ AUTHENTICATION (who are you?) and AUTHORIZATION (what can you do?)
→ protecting DATA (encryption in transit and at rest)
→ input VALIDATION, secure configuration, dependency security, etc.
→ "Security" is a quality of the whole system, not a single feature.
