Software Engineering for Security : a Roadmap

ABSTRACT

Is there such a thing anymore as a software system that doesn't need to be secure?. Almost every software controlled system faces threats from potensial adversaries, from Internet-aware client applications running on PCs, to complex telecommunications and power systems accessible over the Internet,to commodity software with copy protection mechanisms. Software engineering must be cognizant of these threats and engineer systems with credible defenses,while still delivering value to customers.