Defensive design

Defensive design

1. Defensive design is the practice of anticipating every possible way that an end-user could misuse a system or device.

2. During the defensive design process, methods are put in place to eliminate misuse. If this is bot completely possible then it will aim to minimise the negative consequences.

3. Application software often requires a user to input information into a system.This might include: A username / password entry Contact details Current date Input into a search box Building up a shopping cart Entering data into a database

4. User Interface

   • A menu-driven user interface limits the user to being able to pick from a displayed list of choices.
     • A menu interface can help to limit unexpected or invalid entries.
   • Actions from a television/ remote control interface is that you can go up-down-left-right buttons on the remote control to navigate and a 'select' or 'ok' button.

5. Input Validation

   • Validation seeks to ensure that the data entered is valid for further processing by the program handling it
   • Validation is a defensive feature to an input box because the user can enter whatever they like which needs some defensive measures,
   • four validation methods are: Checking and limiting the length of the data, Checking the Range of the data, Checking the Type of the data, checking the Format of the data.

6. Whitelist

   • A white list is a list of data that the application will accept as valid
   • Blacklist
     • A black list is a list of data that the application will reject

Bilder und Dateien der Mindmap