Defensive Design

Defensive Design

1. Input Sanitisation

   • Removing unwanted data/characters
   • e.g removing special characters,preventing SQL injections

2. Validation

   • Checking whether input data should be allowed is sensible or follows certain criteria before passing it into the program
   • e.g goals cannot be less than 0

3. Verification

   • Checking whether data has been entered correctly
   • e.g double entry, visual check

4. Authentication

   • Ensuring only authorised users can gain access to certain pieces of data
   • e.g usernames and passwords

5. Maintainable code

   • Allows other programmers to understand the code
   • e.g comments,indentation,meaningful variable names