"Ensuring Software Security

"Ensuring Software Security" Please respond to the following:

• For Web applications, describe the best practices for mitigating vulnerabilities in order to prevent buffer overflow (BO) attacks or SQL Injections (SQI). Give one (1) real-life example of an actual BO or SQI attack, and explain how it was addressed.
• Imagine that you are responsible for the creation of a security policy for creditcard data that will ensure PCI compliance in an upcoming audit for your company. Outline what your policy would entail. Provide a rationale for the components of your policy.