CST 620 Cybersecurity

Software Development Life Cycle for Data in the Cloud Computing Environment

Initiating the Project and Defining Its Scope

Choose a fictional or actual organization. Describe the mission of the organization and the business need to move to a cloud environment.

Identify the scope of the security architecture and include a topology. Focus on issues the application security engineers can control. Examples of topology include Amazon Web services, Generic Hadoop, Map-r, Cloudera, or MS Azure.

Combine security development lifecycle and software development lifecycle methodologies. Consider what model you are following such as Waterfall, Spiral, Agile, and Extreme Programming.

Address confidentiality, integrity, and availability requirements for data at rest and data in transit.

Address confidentiality, integrity, and availability requirements for data at rest and data in transit.

Describe the concepts and products you chose and explain why these were chosen. Include possible software and hardware components as well as an operating system and the security protections needed for those components.

Begin Functional Analysis and Design—Use SQUARE for Requirements Information Gathering

Identify the SQUARE process and provide an overview of how to collect requirements for the security technology and/or techniques that are being proposed.