Information Security Risk Management for Systems Engineers

摘要

Designing security in at the start of system definition and design, rather than adding it later, has long been accepted wisdom. Sadly system security has often been found to be deficient, and attempts to add improvements later have often proved to be disastrous.