Security engineering

Security systems engineering has existed as an informal field for centuries, in the fields of locksmithing and security printing[?].

Technological advances, principally in the field of computers, have now allowed the creation of far more complex systems than before, with new and complex security problems. Because modern systems cut across many areas of human endavour, security engineers not only need consider the mathematical and physical properties of systems, they also need to consider attacks on the people who use and form parts of those systems using social engineering attacks. Secure systems have to resist not only technical attacks, but also coercion, fraud, and deception by confidence tricksters.

For this reason, as well as physics, chemistry and mathematics, it involves aspects of social science, psychology and economics. Some of the techniques used, such as fault tree analysis are derived from safety engineering.

Other techniques such as cryptography were previously restricted to military applications.

One of the pioneers of security engineering as a formal field of study is Ross Anderson.

Sub-fields of security engineering:

• computer security
• physical security
• information security

See also:

• Authentication
• Authorization
• Computer insecurity
• Cryptology
• Cryptography
• Cryptanalysis
• Deception
• Defensive programming
• Electronic underground community
• Fraud
• Full disclosure
• Hacking
• Kerckhoffs' principle
• Locksmithing
• Secrecy
• Secure computing
• Secure cryptoprocessor
• Security by obscurity
• Security community[?]
• Security stance
• Social engineering
• Steganography
• Systems engineering
• Trust
• Trusted system

Further reading:

• Anderson, Ross - 'Security Engineering', published by Wiley, 2001, ISBN 0471389226
• Schneier, Bruce - 'Applied Cryptography' ISBN 0471117099
• Schneier, Bruce - 'Secrets and Lies: Digital Security in a Networked World' ISBN 0471253111
• Anderson, Ross - Why Information Security is Hard - An Economic Perspective (http://www.acsac.org/2001/papers/110.pdf)