What does "least exposure" mean in secure software design?

• A. Minimal user interaction with software
• B. Fewer entry points for potential threats
• C. Limited functionality to increase security
• D. Short exposure times to APIs

Answer: (B)

In secure software design, "least exposure" refers to the concept of minimizing the number of entry points that potential threats can exploit. By having fewer entry points, such as network interfaces, APIs, or input forms, the attack surface of the software is reduced. This makes it harder for attackers to find vulnerabilities to exploit, ultimately leading to a more secure application. The principle behind this is that each additional entry point given to users or systems represents a potential risk; hence, providing fewer entry points inherently lowers the risk of an attack.

The focus on reducing the entry points helps in ensuring that every exposed interface is secured and monitored, further enhancing the overall security posture of the software. Implementing "least exposure" requires careful architectural design decisions and can be integrated with other security practices to bolster defenses against threats.