JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD

Course Objectives:

• Students will demonstrate knowledge of the distinction between critical and non-critical systems.
• Students will demonstrate the ability to manage a project including planning, scheduling and risk assessment/management.
• Students will author a software requirements document.
• Students will demonstrate an understanding of the proper contents of a software requirements document.
• Students will author a formal specification for a software system.
• Students will demonstrate an understanding of distributed system architectures and application architectures.
• Students will demonstrate an understanding of the differences between real-time and non-real time systems.
• Students will demonstrate proficiency in rapid software development techniques.
• Students will be able to identify specific components of a software design that can be targeted for reuse.
• Students will demonstrate proficiency in software development cost estimation.
• Students will author a software testing plan.

UNIT - I

Security a software Issue: introduction, the problem, Software Assurance and Software Security, Threats to software security, Sources of software insecurity, Benefits of Detecting Software Security What Makes Software Secure: Properties of Secure Software, Influencing the security properties of software, Asserting and specifying the desired security properties?

UNIT - II

Requirements Engineering for secure software: Introduction, the SQUARE process Model, Requirements elicitation and prioritization

UNIT - III

Secure Software Architecture and Design: Introduction, software security practices for architecture and design: architectural risk analysis, software security knowledge for architecture and design: security principles, security guidelines and attack patterns Secure coding and Testing: Code analysis, Software Security testing, Security testing considerations throughput the SDLC

UNIT - IV

Security and Complexity: System Assembly Challenges: introduction, security failures, functional and attacker perspectives for security analysis, system complexity drivers and security

UNIT - V

Governance and Managing for More Secure Software: Governance and security, Adopting an enterprise software security framework, How much security is enough?, Security and project management, Maturity of Practice

Text book:

• 1. Software Security Engineering: Julia H. Allen, Pearson Education Page 33 of 53 R19 M.TECH. SOFTWARE ENGG.

References:

• 1. Developing Secure Software: Jason Grembi, Cengage Learning
• 2. Software Security: Richard Sinn, Cengage Learning Page 34 of 53 R19 M.TECH. SOFTWARE ENGG. M. Tech. – I Year – II Semester (Software Engineering)