Inside the Briefcase
Security Engineering Explained
September 13, 2012 No CommentsTo design, build, and deploy secure applications, you must integrate security into your application development life cycle by including specific security-related activities in your current software engineering processes.
This whitepaper, written by five Microsoft experts and Security Innovation’s CTO Jason Taylor, describes in detail the key components of security engineering:
- identifying security objectives
- applying security design guidelines, patterns, and principles
- conducting security architecture and design reviews
- creating threat models
- performing security code reviews
- application security testing
- conducting security deployment reviews
