ENG 211 - How to Create Application Security Design Requirements
Course Number: ENG 211
Course Duration: 15 minutes
Course CPE Credits: 0.3
NICE Specialty Areas
Related Subject Matter
Foreign Languages Available:
To preserve the confidentiality, integrity, and availability of application data, software applications must be engineered with security in mind. Without defined security requirements, design choices will be made without security guidance and security testing cannot be effective.
This course provides technical and non-technical personnel with the knowledge to understand, create, and articulate security requirements as part of a software requirement document.
- Applying the application security maturity (ASM) model to the development process
- Key security engineering activities: gathering security objectives, applying security design guidelines, and creating threat models
- Identifying threats, attacks, vulnerabilities, and countermeasures
- How to conduct impactful security architecture and design reviews to identify potential security problems and minimize the application’s attack surface.