Deck 27: Security Engineering

Question 1

What is an incidence response plan?

Answer 1

An incidence response plan spells out the actions to be carried out by each of the system's stakeholders in response to specific security threats.
Final Exam Question

Question 2

Which questions need to be answered in user-centered requirements elicitation?

Answer 2

-What are the users' security software needs?
-How can a secure architecture be designed so it accommodates good user interface design?
-How can satisfying user experience be designed so that it is secure?

Question 3

Describe steps needs to create a threat model.

Answer 3

-Identify assets
-Create architectural overview
-Decompose application
-Identify threats
-Document threats
-Rate threats

Question 4

What are the elements of a security case?