Security Engineering Explained
September 13, 2012 No CommentsTo design, build, and deploy secure applications, you must integrate security into your application development life cycle by including specific security-related activities in your current software engineering processes.
This whitepaper, written by five Microsoft experts and Security Innovation’s CTO Jason Taylor, describes in detail the key components of security engineering:
- identifying security objectives
- applying security design guidelines, patterns, and principles
- conducting security architecture and design reviews
- creating threat models
- performing security code reviews
- application security testing
- conducting security deployment reviews