Book123

    Free register and download UseNet downloader, then you can FREE Download from UseNet.

    Download without Limit " Software Security Engineering: A Guide for Project Manage " from UseNet for FREE!

TITLE : (The SEI Series in Software Engineering) (Paperback)

AUTHOR : by Julia H. Allen (Author), Sean Barnum (Author), Robert J. Ellison (Author), Gary McGraw (Author), Nancy R. Mead (Author)

PUBLISHER : Addison-Wesley Professional publisher

ISBN : 032150917X

EDITION : 1st

PUB DATE : May 11, 2008

LANGUAGE : English

RLS DATE : 05/09/2008

[ R e l e a s e N o t e s ]

“This book’s broad overview can help an organization choose a set of processes, policies, and techniques that are appropriate for its security maturity, risk tolerance, and development style. This book will help you undetand how to incorporate practical security techniques into all phases of the development lifecycle.” - Steve Riley, senior security strategist, Microsoft Corporation

“There are books written on some of the topics addressed in this book, and there are other books on secure systems engineering. Few address the entire life cycle with a comprehensive overview and discussion of emerging trends and topics as well as this one.” –Ronda Henning, senior scientist-software/security queen, Harris Corporation

Software that is developed from the beginning with security in mind will resist, tolerate, and recover from attacks more effectively than would otherwise be possible. While there may be no silver bullet for security, there are practices that project manage will find beneficial. With this management guide, you can select from a number of sound practices likely to increase the security and dependability of your software, both during its development and subsequently in its operation.

Software Security Engineering draws extensively on the systematic approach developed for the Build Security In (BSI) Web site. Sponsored by the Department of Homeland Security Software Assurance Program, the BSI site offe a host of tools, guidelines, rules, principles, and other resources to help project manage address security issues in every phase of the software development life cycle (SDLC). The book’s expert autho, themselves frequent contributo to the BSI site, represent two well-known resources in the security world: the CERT Program at the Software Engineering Institute (SEI) and Cigital, Inc., a consulting firm specializing in software security.

This book will help you undetand why

- Software security is about more than just eliminating vulnerabilities and conducting penetration tests

- Network security mechanisms and IT infrastructure security services do not sufficiently protect application software from security risks

- Software security initiatives should follow a risk-management approach to identify priorities and to define what is “good enough”–undetanding that software security risks will change throughout the SDLC

- Project manage and software enginee need to learn to think like an attacker in order to address the range of functions that software should not do, and how software can better resist, tolerate, and recover when under attack

Code: Buy Book at Lowest Price on Amazon

Rating:
2.5 out of 5 by Book123