Defensive Design

Defensive Design

1. Defensive Design - The practice of anticipating every possible way that a user could misuse a system - enter something you haven't planned for.

   • This

2. How do you know if it isn't good enough?

   • - The program will crash, or it will behave in an unintended way

3. User Interface - Designed to limit the user to a certain number of options

4. Screen Widgets - It makes it difficult if not impossible for the user to input an invalid value.

5. Input Sanitisation - Making the input harmless

6. Input Validation - A way of making sure the user is authorised to enter the system.

7. Whitelist - A list of data the application will accept as valid.

8. Blacklist - A list of data the application will reject

9. Authorisation - Making sure the user is allowed to access the system.