CSSLP Certification All-in-One Exam Guide, Second Edition

Wm. Arthur Conklin (Houston, TX), Security+, CISSP, is an Assistant Professor in the Information and Logistics Technology department at the University of Houston. In addition to his PhD, Mr. Conklin has a MBA from UTSA, and two graduate degrees in Electrical Engineering from the Naval Postgraduate School in Monterey, California. Dr. Conklins interests are information security, systems theory, and secure software design. Dan Shoemaker, Ph. D. (University of Detroit Mercy) is the Director of the Centre for the Software Assurance Institute, a National Security Agency (NSA) Center of Academic Excellence, at the University of Detroit Mercy. He is also a Professor at UDM where he has been the Chair of Computer and Information Systems since 1985. Dr. Shoemaker is Co-Chair of the Workforce Training and Education working group within the Department of Homeland Securitys National Cybersecurity Division (NCSD). Dr. Shoemaker was one of the earliest academic participants in the development of Software Engineering as a discipline, starting at SEI in the fall of 1987.

Part I: Secure Software Concepts
Chapter 1: General Security Concepts
Chapter 2: Risk Management
Chapter 3: Security Policies and Regulations
Chapter 4: Software Development Methodologies

Part II: Secure Software Requirements
Chapter 5: Policy Decomposition
Chapter 6: Data Classification and Categorization
Chapter 7: Requirements

Part III: Secure Software Design
Chapter 8: Design Processes
Chapter 9: Design Considerations
Chapter 10: Securing Commonly Used Architectures
Chapter 11: Technologies

Part IV: Secure Software Implementation/Programming
Chapter 12: Common Software Vulnerabilities and Countermeasures
Chapter 13: Defensive Coding practices
Chapter 14: Secure Software Coding Operations

Part V: Secure Software Testing
Chapter 15: Security Quality Assurance Testing
Chapter 16: Security Test Types

Part VI: Secure Lifecycle Management
Chapter 17: Secure Lifecycle Management

Part VII: Secure Deployment, Operations, and Maintenance
Chapter 18: Secure Software Installation and Deployment
Chapter 19: Secure Software Operations and Maintenance

Part VIII: Supply Chain and Software Acquisition
Chapter 20: Supply Chain and Software Acquisition

Glossary