Secure and Resilient Software: Requirements, Test Cases, and Testing Methods
Secure and Resilient Software: Requirements, Test Cases, and Testing Methods
复制标题
安全且有弹性的软件：需求、测试用例和测试方法
DOI：
--
复制
发表时间：
2011
期刊：
影响因子：
--
通讯作者：
L. Raghavan
中科院分区：
文献类型：
--
作者：
M. Merkow;L. Raghavan
安全和弹性软件：需求、测试用例和测试方法为安全和弹性软件开发和操作提供了一套全面的要求。它提供了这些需求的记录测试用例以及测试非功能性需求的最佳实践，以改进信息保证。这本资源丰富的书包括： 预先开发的非功能性需求，可重复用于任何软件开发项目 与需求一起记录的测试用例，可用于开发软件的测试计划 测试方法，可应用于所提供的测试用例 包含所有安全需求和测试用例的 CD，以及本书中涵盖的清单、需求和测试用例的 MS Word 版本 提供底层、已开发的软件非功能性需求和相应的测试用例 方法，本书将有助于确保您的软件满足其安全性和弹性的非功能性要求。附带的 CD 包含有用的清单和可重复使用的文档，为您提供了将安全性集成到软件开发生命周期的需求分析、设计和测试阶段所需的工具。对这本书的一些赞扬：这本书通过几个例子汇集了以整体方式思考这个重要问题的最新技术。它带您完成从构思到实施的整个生命周期...Doug Cavit，微软公司首席安全策略师...为读者提供了在软件开发生命周期 (SDLC) 内快速启动和成熟安全性所需的工具。 Jeff Weekes，Terra Verde Services 的高级安全架构师……两位经历过这一过程的作者提供了丰富的有用见解和实用建议。您得到的是一个战术应用程序安全路线图，可以消除噪音并立即适用于您的项目。 Jeff Williams，Aspect Security 首席执行官兼 OWASP 基金会志愿者主席
Secure and Resilient Software: Requirements, Test Cases, and Testing Methods provides a comprehensive set of requirements for secure and resilient software development and operation. It supplies documented test cases for those requirements as well as best practices for testing nonfunctional requirements for improved information assurance. This resource-rich book includes: Pre-developed nonfunctional requirements that can be reused for any software development project Documented test cases that go along with the requirements and can be used to develop a Test Plan for the software Testing methods that can be applied to the test cases provided A CD with all security requirements and test cases as well as MS Word versions of the checklists, requirements, and test cases covered in the book Offering ground-level, already-developed software nonfunctional requirements and corresponding test cases and methods, this book will help to ensure that your software meets its nonfunctional requirements for security and resilience. The accompanying CD filled with helpful checklists and reusable documentation provides you with the tools needed to integrate security into the requirements analysis, design, and testing phases of your software development lifecycle. Some Praise for the Book: This book pulls together the state of the art in thinking about this important issue in a holistic way with several examples. It takes you through the entire lifecycle from conception to implementation ... .Doug Cavit, Chief Security Strategist, Microsoft Corporation ...provides the reader with the tools necessary to jump-start and mature security within the software development lifecycle (SDLC). Jeff Weekes, Sr. Security Architect at Terra Verde Services...full of useful insights and practical advice from two authors who have lived this process. What you get is a tactical application security roadmap that cuts through the noise and is immediately applicable to your projects. Jeff Williams, Aspect Security CEO and Volunteer Chair of the OWASP Foundation