5 ms·
Security Engineering Course
- iammjm 5y agoIs this book still relevant considering that it has been written in 2001 and updated in 2008?
- Saanti 5y ago3rd edition is 2020
- BayesianDice 5y agoThanks, I'd found the first edition a really good book when I was early in my security career many years ago, I shall have to check the 2020 edition!
- philprx 5y agoYes it is, very good book because it goes from the fundamentals to elaborate examples. Now if you really want to be in research and current attack/defense then you need to do your homework. But all the foundations in this book will help you have a comprehensive picture of the landscape you're playing in.
- leavenotracks 5y agoAuthor himself points out just how much has changed, in the two decades, in the preface to the latest edition.
- _8j50 5y agoThis is one of those things. I do security engineering but it has little to do with building systems or software. In this case what they mean is "engineering securely" but a security engineer in a security team will be engineering various security tools and content (endpoint security tools/content, threat intel platforms,SIEM,etc...) so literally engineering security controls. Not that I mind but the ambiguity might cause confusion.
- dwheeler 5y agoIf you're interested in learning how to develop secure software, I recommend checking out the free set of 3 courses from the Open Source Security Foundation (OpenSSF) on "Secure Software Development Fundamentals": https://openssf.org/training/courses/ https://openssf.org/training/courses/ They're hosted on edX. Like many edX courses, if you want to prove you learned the material you can pay to try to pass various tests and get a certificate, but you do not need to pay if you just want to learn the material. Full disclosure: I'm the author. But hopefully you'll like it anyway :-).
- CodeGlitch 5y agoInteresting...not heard of the openssf (I see they were only formed in 2020?). Regarding secure software development, I've not seen many certs / exams covering the topic, so it's good you've developed those 3 courses. The only other cert I've seen is the CSSLP by (ISC)2: https://www.isc2.org/Certifications/CSSLP https://www.isc2.org/Certifications/CSSLP Can you comment on how they compare?
- x0x0 5y agoDo people have suggestions for courses / books / ??? to distribute to eng teams building rails or python/django apps? Any applied security stuff? Not in order to make people experts, but eg security for the working web engineer?
- deleted 5y ago[deleted]