Secure Software Lifecycle Professional – CSSLP – Question104

Which of the following provides an easy way to programmers for writing lower-risk applications and retrofitting security into an existing application?

A.
Watermarking
B. ESAPI
C. Encryption wrapper
D. Code obfuscation

Correct Answer: B

Explanation:

Explanation: ESAPI (Enterprise Security API) is a group of classes that encapsulate the key security operations, needed by most of the applications. It is a free, open source, Web application security control library. ESAPI provides an easy way to programmers for writing lower-risk applications and retrofitting security into an existing application. It offers a solid foundation for new development. Answer: A is incorrect. Watermarking is the process of embedding information into software in a way that is difficult to remove. Answer: C is incorrect. Encryption wrapper dynamically encrypts and decrypts all the software code at runtime. Answer: D is incorrect. Code obfuscation is designed to protect code from decompilation.