Hello, everyone!
I would like to share with you a new Bitcoin learning recourse, that helps beginners to understand the crypto market basics and professionals track cryptocurrency prices. Maybe it will be useful for some of you, because it sure was for me! I recently found it in app store. Bitcoin Flip Trading game helped me to learn about Bitcoin trading in no risk environment. But enough talking, you can test it yourself! Check it out here—> Bitcoin Flip- FREE Bitcoin game

[/size]

   http://

Bitcoin is one of the most important inventions in all of human history. For the first time ever, anyone can send or receive any amount of money with anyone else, anywhere on the planet, conveniently and without restriction. It’s the

How the Gravity Protocol Team Implements a Security Development Lifecycle

Ensuring the security of a blockchain network

Recent security incidents with the DAO, Ethereum Krypton 51% attack, and “epic” vulnerabilities discovered in EOS by Chinese security researchers at Qihoo 360 (luckily fixed) once again tell us that security concerns are paramount for open blockchain networks supported by communities.
 First of all, we need to understand — “What is security?” The CIA security triad model, composed of three areas; (1) Confidentiality, (2) Integrity and (3) Availability will be referenced throughout this paper.

According to the National Institute of Standards and Technology (NIST):

Confidentiality refers to “The property that sensitive information is not disclosed to unauthorized individuals, entities, or processes”;
Integrity is defined as the “guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity”.
Availability references the concept of “ensuring timely and reliable access to and use of information”
What does it take to ensure security in your software system? It means that your engineering team has a certain level of maturity and implements rigorous Secure Software Development Lifecycle (S-SDLC).

The S-SDLC process ensures that security assurance activities such as code review, architecture analysis, and attack modelling, are an integral part of the development effort. The main advantages of pursuing a Secure SDLC approach with regards to an open blockchain are:

• Increased quality and security of software as security is a continuous concern.
• Awareness of security considerations by stakeholders and the community.
• Early detection of flaws and vulnerabilities in the system.
• Overall reduction of intrinsic business risks for the community.

Since Gravity Protocol is an open blockchain offering solutions for small and medium businesses, secure software is our highest priority. See how we implement similar to SDL development process here on our blog.

Hi everyone!
Every week we publish an article related to GravityProtocol, its features, use cases, testnet reports and so on. Short announcements of these articles you can find here in this thread.
Don't hesitate to comment the articles!

Another thing is, when coding according to the deliverable of this worker (the design), it's expected that some designed functionalities need to be changed due to whatever reason. Will this worker cover the work needed for design changing? If not, will you support the changing, and how much would it be?

mark