Engineering Software Products: An Introduction to Modern Software Engineering

Key Points

• Security is a technical concept that relates to a software system's ability to protect itself from malicious attacks that may threaten its availability, the integrity of the system and its data, and the theft of confidential information.

• Common types of attack on software products are injection attacks, cross-site scripting attacks, session hijacking attacks, denial-of-service attacks, and brute force attacks.

• Authentication may be based on something a user knows, something a user has, or some physical attribute of the user.

• Federated authentication involves devolving responsibility for authentication to a third party, such as Facebook or Google, or to a business's authentication service.

• Authorization involves controlling access ...