Sommerville-Software-Engineering-10ed

13
Security engineering
Objectives
The objective of this chapter is to introduce security issues that you
should consider when you are developing application systems. When you
have read this chapter, you will:
■ understand the importance of security engineering and the difference
between application security and infrastructure security;
■ know how a risk-based approach can be used to derive security
requirements and analyze system designs;
■ know of software architectural patterns and design guidelines for
secure systems engineering;
■ understand why security testing and assurance is difficult and
expensive.
Contents
13.1 Security and dependability
13.2 Security and organizations
13.3 Security requirements
13.4 Secure systems design
13.5 Security testing and assurance