Build Security In Web Site References
by Nancy R. Mead, Gary McGraw, Robert J. Ellison, Sean Barnum, Julia H. Allen
Software Security Engineering: A Guide for Project Managers
- Copyright
- Foreword
- Preface
- About the Authors
- 1. Why Is Security a Software Issue?
- 2. What Makes Software Secure?
- 2.1. Introduction
- 2.2. Defining Properties of Secure Software
- 2.3. How to Influence the Security Properties of Software
- 2.3.1. The Defensive Perspective
- 2.3.2. The Attacker’s Perspective
- The Attacker’s Advantage
- Finding a Way to Represent the Attacker’s Perspective
- What Does an Attack Pattern Look Like?
- Leveraging Attack Patterns in All Phases of the Software Development Life Cycle
- Leveraging Attack Patterns in Positive and Negative Security Requirements
- Leveraging Attack Patterns in Architecture and Design
- Leveraging Attack Patterns in Implementation and Coding
- Leveraging Attack Patterns in Software Security Testing
- 2.4. How to Assert and Specify Desired Security Properties
- 2.5. Summary
- 3. Requirements Engineering for Secure Software
- 3.1. Introduction
- 3.2. Misuse and Abuse Cases
- 3.3. The SQUARE Process Model
- 3.4. SQUARE Sample Outputs
- 3.5. Requirements Elicitation
- 3.5.1. Overview of Several Elicitation Methods
- Misuse Cases
- Soft Systems Methodology (SSM)
- Quality Function Deployment (QFD)
- Controlled Requirements Expression (CORE)
- Issue-Based Information Systems (IBIS)
- Joint Application Development (JAD)
- Feature-Oriented Domain Analysis (FODA)
- Critical Discourse Analysis (CDA)
- Accelerated Requirements Method (ARM)
- 3.5.2. Elicitation Evaluation Criteria
- 3.5.1. Overview of Several Elicitation Methods
- 3.6. Requirements Prioritization
- 3.7. Summary
- 4. Secure Software Architecture and Design
- 4.1. Introduction
- 4.2. Software Security Practices for Architecture and Design: Architectural Risk Analysis,
- 4.3. Software Security Knowledge for Architecture and Design: Security Principles, Security Guidelines, and Attack Patterns
- 4.3.1. Security Principles
- The Principles for Software Security
- The Principle of Least Privilege
- The Principle of Failing Securely
- The Principle of Securing the Weakest Link
- The Principle of Defense in Depth
- The Principle of Separation of Privilege
- The Principle of Economy of Mechanism
- The Principle of Least Common Mechanism
- The Principle of Reluctance to Trust
- The Principle of Never Assuming That Your Secrets Are Safe
- The Principle of Complete Mediation
- The Principle of Psychological Acceptability
- The Principle of Promoting Privacy
- Recapping Security Principles
- The Principles for Software Security
- 4.3.2. Security Guidelines
- 4.3.3. Attack Patterns
- 4.3.1. Security Principles
- 4.4. Summary
- 5. Considerations for Secure Coding and Testing
- 6. Security and Complexity: System Assembly Challenges
- 7. Governance, and Managing for More Secure Software
- 7.1. Introduction
- 7.2. Governance and Security
- 7.3. Adopting an Enterprise Software Security Framework
- 7.4. How Much Security Is Enough?
- 7.5. Security and Project Management
- 7.6. Maturity of Practice
- 7.7. Summary
- 8. Getting Started
- Glossary
- References
- Build Security In Web Site References
The Build Security In Web site URL is https://buildsecurityin.us-cert.gov/. The following BSI documents are cited in this book.
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.