At the end of your textbook on page 385, the author mentions several “encouraging security architecture developments:
The Open Group has created an Enterprise Security Architect certification. One of their first certified architects has subsequently created a few enterprise security reference architectures.
The SANS Institute hosted three What Works in Security Architecture Summits.
The IEEE initiated a Center for Secure Design. The Center published a Top 10 Design Flaws booklet.
Adam Shostack published Threat Modeling: Designing for Security, and renown threat modeler, John Steven, has told me that hes working on his threat modeling book.
Anurag Agrawal of MyAppSecurity has been capturing well-known attack surfaces and their technical mitigations within his commercial threat modeling tool, Threat Modeler.
Recent Comments