Book description
Secure Software Systems presents an approach to secure software systems design and development that tightly integrates security and systems design and development (or software engineering) together. It addresses the software development process from the perspective of a security practitioner. The text focuses on the processes, concepts, and concerns of ensuring that secure practices are followed throughout the secure software systems development life cycle, including the practice of following the life cycle rather than just doing ad hoc development.
Table of contents
- Cover
- Title Page
- Copyright Page
- Contents
- Preface
- Acknowledgments
- CHAPTER 1 Secure Software Systems Development
- CHAPTER 2 Product and Portfolio Management
- CHAPTER 3 Program and Project Management
- CHAPTER 4 Process Management
- CHAPTER 5 Managing the Secure Software Systems Development Life Cycle
-
CHAPTER 6 Security Culture, Responsibility, and Training
- Introduction
-
Look and Feel of a Security Culture
- Leadership Sets the Tone for Cybersecurity
- Someone with Responsibility and Authority
- Security Roles and Responsibilities Defined for All
- Security Is Considered in All Aspects of Products
- Security Is Widely Discussed and Shared with Customers
- Security Is Valued
- Security Culture Maturity
- Company Policies and Procedures Are Established and Available
- An Effective Security Culture among Programmers and System Administrators Is Vital
- Responsibility
- Training the Organization to Be Secure
- SUMMARY
- KEY TERMS
- CHAPTER 7 Requirements and Security Requirements Planning
- CHAPTER 8 Compliance
- CHAPTER 9 Quality Management
- CHAPTER 10 Modeling
- CHAPTER 11 Architecture
- CHAPTER 12 Vulnerability and Threat Assessment
- CHAPTER 13 The Development Environment
- CHAPTER 14 Configuration Management
- CHAPTER 15 Testing
- CHAPTER 16 Product Release and Deployment
- CHAPTER 17 Operations and Maintenance
- CHAPTER 18 Retirement or End-of-Life
- Glossary
- Index
Product information
- Title: Secure Software Systems
- Author(s):
- Release date: March 2023
- Publisher(s): Jones & Bartlett Learning
- ISBN: 9781284261219
You might also like
book
Security as Code
DevOps engineers, developers, and security engineers have ever-changing roles to play in today's cloud native world. …
book
Software Supply Chain Security
Trillions of lines of code help us in our lives, companies, and organizations. But just a …
book
Cyber Security and Network Security
CYBER SECUTIRY AND NETWORK SECURITY Written and edited by a team of experts in the field, …
book
Application Security Program Handbook
Stop dangerous threats and secure your vulnerabilities without slowing down delivery. This practical book is a …