Enterprise Software Security: A Confluence of Disciplines

Preface

In today’s commercial enterprises, information security staffs spend years building walls around their business applications. That’s good. Practitioners have known for years, however, that—for a real chance at corporate safety—the enterprise’s application programmers must also build security into the business software.

Yet even the powerful combination of a sound perimeter and front-to-back application security might not suffice against the highly sophisticated attacks launched against today’s networks. One surprising reason: There is all too often a cultural and physical separation between the software development staff and the information security staff in large enterprises.

This book bridges that gulf. We identify the issues that distinguish ...