Software Engineering for Secure Systems: Industrial and Research Perspectives

This book delivers such a needed multiplicity, having interesting contributions from a number of excellent researchers within the area of software systems security. With parts about security patterns, development methods and frameworks, privacy and trust, and code analysis, it covers a large part of the lifecycle, from high level threats and early user requirements to intricate technical details; and it covers both process (e.g., development methods) and product (e.g., patterns, architecture). All in all, this anthology provides a very important view of where the research front stands today on various issues related to software engineering for security and privacy. The reader who has little knowledge about the topic will find good introductions to the various challenges, as well as a wealth of references pointing to further readings. The expert will find detailed contributions by top researchers in the field, which will inspire further research and hopefully provide a crucial and needed input for industrial practice, aiming to provide the foundations for better software systems security and privacy in the years to come.

This collection of twelve articles on implementing software security benchmarks throughout the development lifecycle, showcases current research on the implementation of security conscious design principles. The volume is divided into four sections covering security patterns, methodologies and frameworks, privacy and trust and secure code analysis, and individual essays discuss such topics as modeling comparisons for security patterns, balancing security and performance, privacy aware information systems and static program analysis in Java-based programming.