Which of the following should the organization incorporate into the SDLC to ensure the security of the open-source libraries?

A security engineer was auditing an organization’s current software development practice and discovered that multiple open-source libraries were Integrated into the organization’s software. The organization currently performs SAST and DAST on the software it develops.

Which of the following should the organization incorporate into the SDLC to ensure the security of the open-source libraries?
A . Perform additional SAST/DAST on the open-source libraries.
B . Implement the SDLC security guidelines.
C . Track the library versions and monitor the CVE website for related vulnerabilities.
D . Perform unit testing of the open-source libraries.

View Answer

Answer: B

Explanation:

Reference: https://www.whitesourcesoftware.com/resources/blog/application-security-best-practices/