Designing Secure Systems

Modern systems are an intertwined mesh of human process, physical security, and technology, and attackers exploit weaknesses in one form of security to gain control. Designing Secure Systems takes a theory-based approach to concepts underlying all forms of systems, discussing how weakness in one part of a system creates vulnerability in another. It covers access, authorization, authentication, exploitation, the NIST Cybersecurity Framework, the NIST National Vulnerability Database, the MITRE Common Vulnerability Scoring System, Microsoft's Security Development Lifecycle, and the MITRE ATT&CK Framework.

Format: Hardback
Length: 204 pages
Publication date: 23 September 2021
Publisher: Taylor & Francis Ltd

Modern systems are a complex web of human processes, physical security measures, and technological advancements. Attackers exploit vulnerabilities in these systems to gain unauthorized access and control, often using a weakness in one security layer to compromise an otherwise secure operation. To address these vulnerabilities, we need a unified model that encompasses all aspects of the system, treating each component equally.

Designing Secure Systems takes a theoretical approach to understanding the fundamental concepts underlying various types of systems, including locks, phishing attacks, and enterprise software architecture. It explores how weaknesses in one part of a system can create vulnerabilities in others, while also applying cybersecurity standards and frameworks commonly used in the field. The book's objective is to analyze the security of the entire system, encompassing people, processes, and technology, using a single model.

The book begins by introducing the core concepts of access, authorization, authentication, and exploitation. It then delves into the intricate details of authorization, breaking it down into five interconnected components: physical access control, human process control, cybersecurity, information security, and risk management. Each component is explored in depth, providing practical insights into how they apply to physical security, human processes, and cybersecurity.

Furthermore, the book discusses how to operate a secure system based on the NIST Cybersecurity Framework (CSF) concepts of identify, protect, detect, respond, and recover. It covers the NIST National Vulnerability Database (NVD), the MITRE Common Vulnerability Scoring System (CVSS), Microsoft's Security Development Lifecycle (SDL), and the MITRE ATT&CK Framework, which are essential tools for assessing and mitigating security risks.

In addition to these topics, Designing Secure Systems provides valuable insights into the latest security trends, such as artificial intelligence, blockchain, and the Internet of Things (IoT). It discusses the challenges and opportunities these technologies present, as well as the best practices for designing and implementing secure systems in the face of evolving threats.

By providing a comprehensive and theoretical framework for designing secure systems, Designing Secure Systems is an essential resource for professionals, researchers, and students in the field of cybersecurity. It equips readers with the knowledge and tools they need to identify, assess, and mitigate security risks in a rapidly changing technological landscape.

Weight: 474g
Dimension: 238 x 263 x 19 (mm)
ISBN-13: 9780367700010