Software Engineering, 10th Edition

Key Points

• Security engineering focuses on how to develop and maintain software systems that can resist malicious attacks intended to damage a computer-based system or its data.

• Security threats can be threats to the confidentiality, integrity, or availability of a system or its data.

• Security risk management involves assessing the losses that might ensue from attacks on a system, and deriving security requirements that are aimed at eliminating or reducing these losses.

• To specify security requirements, you should identify the assets that are to be protected and define how security techniques and technology should be used to protect these assets.

• Key issues when designing a secure systems architecture include organizing the system ...