Différences
Ci-dessous, les différences entre deux révisions de la page.
en:cs:quality_report [2018/02/11 22:10] – [Role of the Product Standard Security requirements] fraggle | en:cs:quality_report [2021/12/27 18:25] (Version actuelle) – modification externe 127.0.0.1 | ||
---|---|---|---|
Ligne 214: | Ligne 214: | ||
In case of corporate violations in addition an exceptional approval needs to be requested. | In case of corporate violations in addition an exceptional approval needs to be requested. | ||
- | Links to the requirements | + | List of the requirements |
==== List of Product Standard Requirements ==== | ==== List of Product Standard Requirements ==== | ||
Ligne 275: | Ligne 275: | ||
| SEC-244 - Deliver with a secure default configuration | | |X| | | SEC-244 - Deliver with a secure default configuration | | |X| | ||
| SEC-275 - Enforce address space layout randomization, | | SEC-275 - Enforce address space layout randomization, | ||
- | | Secure-by-design | | | | | + | | **Secure-by-design** | | | | |
| SEC-219 - Provide a risk-adequate second line of defense against malicious input from the Internet | | |X| | | SEC-219 - Provide a risk-adequate second line of defense against malicious input from the Internet | | |X| | ||
| SEC-228 - Protect upload, download and display functions of untrusted files against MIME-type sniffing and virus attacks | | |X| | | SEC-228 - Protect upload, download and display functions of untrusted files against MIME-type sniffing and virus attacks | | |X| |