Secure Software Lifecycle Professional – CSSLP – Question139

Which of the following provides an easy way to programmers for writing lower-risk applications and retrofitting security into an existing application?

A.
Watermarking
B. Code obfuscation
C. Encryption wrapper
D. ESAPI

Correct Answer: D

Explanation:

Explanation: ESAPI (Enterprise Security API) is a group of classes that encapsulate the key security operations, needed by most of the applications. It is a free, open source, Web application security control library. ESAPI provides an easy way to programmers for writing lower-risk applications and retrofitting security into an existing application. It offers a solid foundation for new development. Answer: C is incorrect. An encryption wrapper is a device that encrypts and decrypts the critical or all software codes at runtime. Answer: B is incorrect. Code obfuscation transforms the code so that it is less intelligible for a person. Answer: A is incorrect. Watermarking is the irreversible process of embedding information into a digital media. The purpose of digital watermarks is to provide copyright protection for intellectual property that is in digital form.