Architecting Secure Software Systems

Traditionally, software engineers have defined security as a non-functional requirement. As such, all too often it is only considered as an afterthought, making software applications and services vulnerable to attacks. With the phenomenal growth in cybercrime, it has become imperative that security be an integral part of software engineering so that all software assets are protected and safe. **Architecting Secure Software Systems defines how security should be incorporated into basic software engineering at the requirement analysis phase, continuing this sharp focus into security design, secured programming, security testing, and secured deployment.** **__Outlines Protection Protocols for Numerous Applications__** Through the use of examples, this volume defines a myriad of security vulnerabilities and their resultant threats. It details how to do a security requirement analysis and outlines the security development lifecycle. The authors examine security architectures and threat countermeasures for UNIX, .NET, Java, mobile, and Web environments. Finally, they explore the security of telecommunications and other distributed services through Service Oriented Architecture (SOA). The book employs a versatile multi-platform approach that allows users to seamlessly integrate the material into their own programming paradigm regardless of their individual programming backgrounds. The text also provides real-world code snippets for experimentation. **__Define a Security Methodology from the Initial Phase of Development__** Almost all assets in our lives have a virtual presence and the convergence of computer information and telecommunications makes these assets accessible to everyone in the world. This volume enables developers, engineers, and architects to approach security in a holistic fashion at the beginning of the software development lifecycle. By securing these systems from the project’s inception, the monetary and personal privacy catastrophes caused by weak systems can potentially be avoided. Are you a software engineer who is trying to incorporate security into basic software engineering? If you are, then this book is for you! Authors Asoke K. Talukder and Manish Chaitanya, have done an outstanding job of writing a book that shows you how to architect and develop software systems that are secure and safe. Talukder and Chaitanya, begin by discussing security, vulnerabilities, exploits and attacks. Next, the authors show you how to architect security software right from its inception. Then, they describe various vulnerabilities and loopholes in C programming. They continue by discussing Microsoft .NET Framework with all of its security services. Next, the authors cover security SOA and distributed environments. Then, they explore the security features that Java provides and show you how you can take advantage of these features for writing safe and reliable code. The authors continue by discussing various networks including NGN. Next, they explore security challenges related to the application interface. They continue by looking into the security threats of the J2EE programming model and the techniques to counter these vulnerabilities using programmatic and configuration techniques with respect to Servlets, JSPs and EJBs. Finally, the authors discuss the various types of threats relevant to Web services and various ways to address them. This most excellent book presents techniques that will hopefully stop a hacker from successfully launching attacks on your computer applications. More importantly, it will show you how security information is power! Publisher description: "Through the use of examples, this volume defines a myriad of security vulnerabilities and their resultant threats. It details how to do a security requirement analysis and outlines the security development lifecycle. The authors examine security architectures and threat countermeasures for UNIX, .NET, Java, and Web environments. Finally, they explore the security of telecommunications and other distributed services through Service Oriented Architecture (SOA). The book employs a versatile multi-platform approach which allows users to seamlessly integrate the material into their own programming paradigm regardless of their individual programming backgrounds. The text also provides real-world code snippets for experimentation." Once regarded as an afterthought, today, security is considered an integral part of software development that must start at the requirements gathering phase. This book covers various aspects of embedding security into an application as it is programmed, using any of the main platforms of today including UNIX, Java, and .NET. Asoke K. Talukder, Manish Chaitanya. An Auerbach Book. Includes Bibliographical References And Index.