Software Engineering, 10th Edition

13 Security engineering

Objectives

The objective of this chapter is to introduce security issues that you should consider when you are developing application systems. When you have read this chapter, you will:

• understand the importance of security engineering and the difference between application security and infrastructure security;

• know how a risk-based approach can be used to derive security requirements and analyze system designs;

• know of software architectural patterns and design guidelines for secure systems engineering;

• understand why security testing and assurance is difficult and expensive.

Contents

1. 13.1 Security and dependability

2. 13.2 Security and organizations

3. 13.3 Security requirements

4. 13.4 Secure systems design

5. 13.5