Security Engineering Explained

From Mynoteswiki.com

Summary

To meet your application security objectives, you must integrate security into your application development life cycle. You can do so by including specific security-related activities in your current software engineering processes. These activities include identifying security objectives, applying secure design guidelines, patterns, and principles, creating threat models, conducting architecture and design reviews for security, performing regular code reviews for security, testing for security, and conducting deployment reviews to ensure secure configuration.

Key Links

• MSDN Home: http://msdn2.microsoft.com/en-us/library/ms998382.aspx

Contents At a Glance

• Introduction
• Chapter 1, Security Engineering Approach
• Chapter 2, Security Objectives
• Chapter 3, Security Design Guidelines
• Chapter 4, Threat Modeling
• Chapter 5, Security Architecture and Design Review
• Chapter 6, Security Code Review
• Chapter 7, Security Deployment Review