Fundamentals of Secure System Modelling

This book provides a coherent overview of the most important modelling-related security techniques available today, and demonstrates how to combine them. Further, it describes an integrated set of systematic practices that can be used to achieve increased security for software from the outset, and combines practical ways of working with practical ways of distilling, managing, and making security knowledge operational.
The book addresses three main topics: (1) security requirements engineering, including security risk management, major activities, asset identification, security risk analysis and defining security requirements; (2) secure software system modelling, including modelling of context and protected assets, security risks, and decisions regarding security risk treatment using various modelling languages; and (3) secure system development, including effective approaches, pattern-driven development, and model-driven security.
The primary target audience of this book is graduate students studying cyber security, software engineering and system security engineering. The book will also benefit practitioners interested in learning about the need to consider the decisions behind secure software systems. Overall it offers the ideal basis for educating future generations of security experts.

Aceasta carte ofera o imagine de ansamblu coerenta a celor mai importante tehnici de securitate legate de modelare disponibile astazi si demonstreaza cum sa le combinati. Mai mult, descrie un set integrat de practici sistematice care pot fi utilizate pentru a obtine securitate sporita pentru software inca de la inceput si combina modalitati practice de lucru cu modalitati practice de distilare, gestionare si punere in functiune a cunostintelor de securitate. Cartea abordeaza trei subiecte principale : (1) ingineria cerintelor de securitate, inclusiv gestionarea riscurilor de securitate, activitati majore, identificarea activelor, analiza riscurilor de securitate si definirea cerintelor de securitate; (2) modelarea securizata a sistemului software, inclusiv modelarea activelor de context si protejate, a riscurilor de securitate si a deciziilor privind tratarea riscurilor de securitate utilizand diferite limbaje de modelare; si (3) dezvoltarea sigura a sistemului, inclusiv abordari eficiente, dezvoltare bazata pe tipare si securitate bazata pe modele. Publicul tinta principal al acestei carti este studentii absolventi care studiaza securitatea cibernetica, ingineria software si ingineria securitatii sistemelor.