An approach to software and systems development that integrates security considerations at every stage of the design and development lifecycle rather than adding security measures after deployment.
Related Terms
Defense in Depth
generalA layered security strategy that uses multiple defensive mechanisms so that if one control fails, others continue to pro...
Privacy by Design
data-protectionAn approach that integrates privacy considerations into the design and development of systems, processes, and products f...
Threat Modeling
generalA structured process for identifying potential threats, vulnerabilities, and attack vectors in a system, and determining...