Cybersecurity is a global goal that is central to national security planning in many countries.One of the most active research fields is design of practices for the development of so-called highly secure software as a...Cybersecurity is a global goal that is central to national security planning in many countries.One of the most active research fields is design of practices for the development of so-called highly secure software as a kind of protection and reduction of the risks from cyber threats.The use of a secure software product in a real environment enables the reduction of the vulnerability of the system as a whole.It would be logical to find the most optimal solution for the integration of secure coding in the classic SDLC(software development life cycle).This paper aims to suggest practices and tips that should be followed for secure coding,in order to avoid cost and time overruns because of untimely identification of security issues.It presents the implementation of secure coding practices in software development,and showcases several real-world scenarios from different phases of the SDLC,as well as mitigation strategies.The paper covers techniques for SQL injection mitigation,authentication management for staging environments,and access control verification using JSON Web Tokens.展开更多
During recent ten years, many serious disasters were prevented and reduced by Chinese people and Government. The mechanism of Chinese disaster prevention and reduction was summarized in this paper. 24 years ago, autho...During recent ten years, many serious disasters were prevented and reduced by Chinese people and Government. The mechanism of Chinese disaster prevention and reduction was summarized in this paper. 24 years ago, author presented modern theory of disaster prevention and reduction in China firstly. A lot of work was done by Chinese people and scientists. For example, presented strategic suggestion; promoted "China Center of Disaster Reduction"; finished "National Report" and "China Plan on Disaster Reduction" and "China Decade Report" etc. As other part of practice, a series of modern scientific and technologic systems or setup were established or developed. For example, "Synthetic Scientific System of Atmosphere Hydrosphere Disaster Reduction" (SSSAHDR) obtained greatly successes reducing losses about 200 million US$; and it promotes to establish "China Center of Disaster Reduction" and larger step of "China Modern Setup of Disaster Prevention and Reduction" was presented and so on. It is very clear that above theory and practice of disaster prevention and reduction are important and useful for Chinese works on disaster reduction; and it may be a reference for other countries, specially for developing countries. China is in the crossing region of two great hazard belts in the world, and it’s natural hazards frequently strike and cause heavy damage. So, China is one of the few countries where natural hazards strike frequently and make serious damage. During recent ten years (1989-1998), the middle value of all direct economic losses of natural disasters in China are 157.8 billion yuan RMB a year. It is about 2.6%～6.1% General National Production (GNP) of China, the middle loss value of GNP is 3.8% which is very high, it is about ten times than advancing countries. The maximum of economic losses is 300.7 billion yuan RMB in 1998, because great flood struck our country in this year. So, disaster prevention and reduction are very important task in China which is in relation closely with national economic development.展开更多
文摘Cybersecurity is a global goal that is central to national security planning in many countries.One of the most active research fields is design of practices for the development of so-called highly secure software as a kind of protection and reduction of the risks from cyber threats.The use of a secure software product in a real environment enables the reduction of the vulnerability of the system as a whole.It would be logical to find the most optimal solution for the integration of secure coding in the classic SDLC(software development life cycle).This paper aims to suggest practices and tips that should be followed for secure coding,in order to avoid cost and time overruns because of untimely identification of security issues.It presents the implementation of secure coding practices in software development,and showcases several real-world scenarios from different phases of the SDLC,as well as mitigation strategies.The paper covers techniques for SQL injection mitigation,authentication management for staging environments,and access control verification using JSON Web Tokens.
文摘During recent ten years, many serious disasters were prevented and reduced by Chinese people and Government. The mechanism of Chinese disaster prevention and reduction was summarized in this paper. 24 years ago, author presented modern theory of disaster prevention and reduction in China firstly. A lot of work was done by Chinese people and scientists. For example, presented strategic suggestion; promoted "China Center of Disaster Reduction"; finished "National Report" and "China Plan on Disaster Reduction" and "China Decade Report" etc. As other part of practice, a series of modern scientific and technologic systems or setup were established or developed. For example, "Synthetic Scientific System of Atmosphere Hydrosphere Disaster Reduction" (SSSAHDR) obtained greatly successes reducing losses about 200 million US$; and it promotes to establish "China Center of Disaster Reduction" and larger step of "China Modern Setup of Disaster Prevention and Reduction" was presented and so on. It is very clear that above theory and practice of disaster prevention and reduction are important and useful for Chinese works on disaster reduction; and it may be a reference for other countries, specially for developing countries. China is in the crossing region of two great hazard belts in the world, and it’s natural hazards frequently strike and cause heavy damage. So, China is one of the few countries where natural hazards strike frequently and make serious damage. During recent ten years (1989-1998), the middle value of all direct economic losses of natural disasters in China are 157.8 billion yuan RMB a year. It is about 2.6%～6.1% General National Production (GNP) of China, the middle loss value of GNP is 3.8% which is very high, it is about ten times than advancing countries. The maximum of economic losses is 300.7 billion yuan RMB in 1998, because great flood struck our country in this year. So, disaster prevention and reduction are very important task in China which is in relation closely with national economic development.
