A Road Map to the Software Engineering Security

Software development Is there such a thing anymore as a software system that doesn\´t need to be secure? We routinely hear vendors claim that their systems are "secure." However, without knowing what assumptions are made by the vendor, it is hard to justify such a claim. Almost every software controlled system faces threats from potential adversaries, from Internet-aware client applications running on PCs, to complex telecommunications and power systems accessible over the Internet, to commodity software with copy Protection mechanisms. Software engineers must be cognizant of these threats and engineer systems with credible defenses, while still delivering value to customers. In this paper, I present my perspectives on the issues that arise in the interactions between software engineering and security.