Live briefing
Everything about Security engineering
Process of incorporating security controls into an information system
Security engineering is the process of incorporating security controls into an information system so that the controls become an integral part of the system's operational capabilities. It is similar to other systems engineering activities in that its primary motivation is to support the delivery of engineering solutions that satisfy pre-defined functional and user requirements, but it has the added dimension of preventing misuse and malicious behavior. Those constraints and restrictions are often asserted as a security policy. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Security engineeringA 5-minute orientation
- Skim a recent paper: STORE: Security Threat Oriented Requirements Engineering MethodologyInfluential work since 2022
- Pick up a classic book: Advances in Computers, Volume 49 (Advances in Computers)The most-reprinted book on the subject
- Read the landmark paper: Engineering Security Requirements.Cited 141 times
- Go sideways: Security information and event managementA closely related topic
- Go sideways: Internet security awarenessA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🏆 Landmark papers (most cited)
Engineering Security Requirements.
Security quality requirements engineering (SQUARE) methodology
Cloud Security Engineering
Web application security engineering
Security Engineering for Machine Learning
Captcha Robustness: A Security Engineering Perspective
Security by Design in Software Engineering
Systems Security Engineering
🆕 Influential since 2022
STORE: Security Threat Oriented Requirements Engineering Methodology
Automated Security Risk Identification Using AutomationML-Based Engineering Data
Customized plant microbiome engineering for food security
HUMAN FACTORS SECURITY ENGINEERING: THE FUTURE OF CYBERSECURITY TEAMS
Making Security Viral: Shifting Engineering Biology Culture and Publishing
📚 Books worth reading
Advances in Computers, Volume 49 (Advances in Computers)Marvin V. Zelkowitz, Marshall C. Yovits · 1995
India's National SecuritySatish Kumar · 2010
Hacking for DummiesKevin Beaver, Jutta Schmidt · 2004
Bad BloodJohn Carreyrou · 2018
HackersSteven Levy · 1984
Critical security studiesColumba Peoples · 2010
CISSPShon Harris, Fernando Maymi · 2005
Engineering information securityStuart Jacobs · 2010
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Security information and event management Security information and event management (SIEM) is a field within computer security that combines security information management (SIM) and security event…
- Internet security awareness Internet security awareness or cyber security awareness is how much end-users know about the cyber security threats their networks face, the risks they…
- List of cybersecurity information technologies This is a list of cybersecurity information technologies. Cybersecurity concerns all technologies that store, manipulate, or move computer data, such as…
- Computer security Computer security (also cybersecurity, digital security, or information technology (IT) security) is a subdiscipline within the field of information security…
- Cyber threat intelligence Cyber threat intelligence (CTI) is a part of cybersecurity that focuses on collecting, analyzing, and sharing information about potential or existing cyber…
- Information security standards Information security standards (also cyber security standards) are guidelines generally outlined in published materials that aim to protect a user's or…
- Threat model Threat modeling is a process by which potential threats, such as structural vulnerabilities or the absence of appropriate safeguards, can be identified…
- Computer security software Computer security software or cybersecurity software is any computer program designed to influence information security. This is often taken in the context…