作者: Michael Dunner , Srinath Vasireddy , John Meier , Blaine Wastell
DOI:
关键词: Security through obscurity 、 Security engineering 、 Software engineering 、 Systems engineering 、 Security service 、 Software security assurance 、 Computer security model 、 Application security 、 Security testing 、 Security information and event management 、 Engineering
摘要: A novel approach to security engineering that leverages expertise enable a user design, build and deploy secure applications is disclosed. In doing so, the innovation discloses techniques mechanisms integrate into application development lifecycle adapt current software practices methodologies include specific related activities. These activities identifying objectives, creating threat models, applying design guidelines, patterns principles, conducting inspections, performing regular code testing for security, deployment inspections ensure configuration.