ENG 211 – How to Create Application Security Design Requirements

Course Overview

To preserve the confidentiality, integrity, and availability of application data, software applications must be engineered with security in mind. Without defined security requirements, design choices will be made without security guidance and security testing cannot be effective.

This course provides technical and non-technical personnel with the knowledge to understand, create, and articulate security requirements as part of a software requirement document.

Topics include:

• Applying the application security maturity (ASM) model to the development process
• Key security engineering activities: gathering security objectives, applying security design guidelines, and creating threat models
• Identifying threats, attacks, vulnerabilities, and countermeasures
• How to conduct impactful security architecture and design reviews to identify potential security problems and minimize the application’s attack surface.