Software Security Engineering - Build Security In - US-CERT

Addressing the Expected: Security Architecture and
Features
• When most people think of making
software secure, they think in terms of
the architecture and functionality of
security features.
• Security features and functionality
alone are insufficient to ensure
software security, but they are a
necessary facet to consider.
• Security features aim to address
expected security issues with software
• Security architecture is the overall
framework that holds these security
functionalities together and provides
the set of interfaces that integrates
them with the broader software
architecture.
© 2008 Cigital Inc. All Rights Reserved. Thursday, November 06, 2008
23