دانلود کتاب طراحی و توسعه سیستم نرم افزاری امن

The goal of this textbook is to present an approach to secure software systems design and development that tightly integrates security and systems design and development (or software engineering) together. The desire to create the book came from searching for an appropriate textbook for a secure software development course. It quickly became apparent that three types of books were available. The first was a software development/engineering book with a chapter or two of security added at the end. The second was a cybersecurity book with a chapter or two of software development/engineering added at the end. Finally, the third type of book was an A-Z (Ö if you’re Swedish) list of all of the potential errors the authors knew about that could be included in a program, with the admonishment “don’t do this.” None of the alternatives presented a systematic approach to applying security while going through the secure software systems development life cycle. Security has proven to be a critical part of such software because of the ever-increasing number of attacks. Such attacks are now bold enough to target very important infrastructures such as electrical grids and pipelines. Failure of such infrastructures can lead to many deaths—so security has become more important than ever. That means that security needs to be baked into the software systems development approach, not added at the end, nor it is the provenance of a specific group of security engineers or specialists.