|
TDI believes that there is no silver bullet
or panacea available to perfect the “art” of
software engineering. It requires a methodology
and a process to be successful. Engineering
advancements in software development have come
about mainly with the introduction of the software
process model, or software lifecycle. Various
authorities, including Carnegie Mellon’s
Software Engineering Institute, agree that
the software process dramatically improves
their productivity, effectiveness and overall
return on investment.
Network security engineers, following in the
wake of software engineers, are scrambling
to find their own silver bullet to provide
solutions in the network security world. Much
like software engineers of old, who mistakenly
felt reusable software and object-oriented
design were solutions, security engineers are
now using firewalls, PKI, smart cards, Kerberos,
and intrusion detection tools as universal
remedies. Network security engineering -like
other engineering disciplines- ultimately requires
a process to be effective and complete. Without
this process, these perceived solutions are
simply patches on the armor of a secure network
and not a true defense.
TDI has developed a methodology, much like
the Carnegie Mellon Software Engineering Institute's
Capability Maturity Model®, for implementing
security in your environment such that it grows
with you. Please read more about our
position in one of TDI's published articles,
as seen in SecurityFocus:
SecurityFocus.com
---------------------------------------------------
I. FRONT AND CENTER
---------------------------------------------------
1. Designing Secure Networks Based on the Software Process Model
It has been asserted that advancements in software development have come about
mainly as a result of the introduction of the software process model or software
lifecycle. SecurityFocus writer Paul Innella argues that in a similar manner
network security designers can benefit from using the principles of the software
process model. In this article, the author outlines eight phases of the software
process models as they apply to the design of a secure network.
 Article
in SecurityFocus
|
