- ホーム
- > 洋書
- > 英文書
- > Computer / General
Full Description
Cyber Security Engineering is the definitive modern reference and tutorial on the full range of capabilities associated with modern cyber security engineering. Pioneering software assurance experts Dr. Nancy R. Mead and Dr. Carol C. Woody bring together comprehensive best practices for building software systems that exhibit superior operational security, and for considering security throughout your full system development and acquisition lifecycles.Drawing on their pioneering work at the Software Engineering Institute (SEI) and Carnegie Mellon University, Mead and Woody introduce seven core principles of software assurance, and show how to apply them coherently and systematically. Using these principles, they help you prioritize the wide range of possible security actions available to you, and justify the required investments.Cyber Security Engineering guides you through risk analysis, planning to manage secure software development, building organizational models, identifying required and missing competencies, and defining and structuring metrics. Mead and Woody address important topics, including the use of standards, engineering security requirements for acquiring COTS software, applying DevOps, analyzing malware to anticipate future vulnerabilities, and planning ongoing improvements.This book will be valuable to wide audiences of practitioners and managers with responsibility for systems, software, or quality engineering, reliability, security, acquisition, or operations. Whatever your role, it can help you reduce operational problems, eliminate excessive patching, and deliver software that is more resilient and secure.
Contents
ForewordPrefaceChapter 1: Cyber Security Engineering: Lifecycle Assurance of Systems and SoftwareChapter 2: Risk Analysis-Identifying and Prioritizing NeedsChapter 3: Secure Software Development Management and Organizational ModelsChapter 4: Engineering CompetenciesChapter 5: Performing Gap AnalysisChapter 6: MetricsChapter 7: Special Topics in Cyber Security EngineeringChapter 8: Summary and Plan for Improvements in Cyber Security Engineering PerformanceReferencesBibliographyAppendix A: WEA Case Study: Evaluating Security Risks Using Mission ThreadsAppendix B: The MSwA Body of Knowledge with Maturity Levels AddedAppendix C: The Software Assurance Curriculum ProjectAppendix D: The Software Assurance Competency Model DesignationsAppendix E: Proposed SwA Competency MappingsAppendix F: BSIMM Assessment Final ReportAppendix G: Measures from Lifecycle Activities, Security Resources, and Software Assurance PrinciplesIndex
