Google Links

Follow the links below to find material targeted to the unit's elements, performance criteria, required skills and knowledge

Elements and Performance Criteria

1. Implement policy-based code-access security in an application
   • Identify the purpose of application security in software development
   • Configure the platform security configuration files using security configuration tools
   • Define a custom code access permission, to restrict access to protected resources or to run protected operations
2. Implement security access control in an application
   • Plan an authentication and authorisation strategy
   • Develop an appropriate authentication and authorisation strategy for an application
3. Write code to encrypt and decrypt data for secure communication
   • Analyse the standard cryptographic algorithms
   • Encrypt, and decrypt, data using standard cryptographic algorithms
4. Protect an application against injections
   • Plan secure input and output handling, to prevent vulnerabilities related to code injections
   • Use secure input and output handling

Performance Evidence

Evidence of the following must be provided:

creating secure applications

planning effective security strategies

ensuring safe communications

preventing security attacks.

Note: If a specific volume or frequency is not stated, then evidence must be provided at least once.

---

Knowledge Evidence

Evidence of the ability to:

outline basic hardware, and networking

outline basic programming algorithms

explain object-oriented programming

recognise the mathematics required for programming algorithms.

---