CyberSecurity in a DevOps Environment (Record no. 87144)
[ view plain ]
| 000 -LEADER | |
|---|---|
| fixed length control field | 05176nam a22006015i 4500 |
| 001 - CONTROL NUMBER | |
| control field | 978-3-031-42212-6 |
| 005 - DATE AND TIME OF LATEST TRANSACTION | |
| control field | 20240730170740.0 |
| 008 - FIXED-LENGTH DATA ELEMENTS--GENERAL INFORMATION | |
| fixed length control field | 231215s2024 sz | s |||| 0|eng d |
| 020 ## - INTERNATIONAL STANDARD BOOK NUMBER | |
| ISBN | 9783031422126 |
| -- | 978-3-031-42212-6 |
| 082 04 - CLASSIFICATION NUMBER | |
| Call Number | 005.1 |
| 245 10 - TITLE STATEMENT | |
| Title | CyberSecurity in a DevOps Environment |
| Sub Title | From Requirements to Monitoring / |
| 250 ## - EDITION STATEMENT | |
| Edition statement | 1st ed. 2024. |
| 300 ## - PHYSICAL DESCRIPTION | |
| Number of Pages | XVI, 324 p. 1 illus. |
| 505 0# - FORMATTED CONTENTS NOTE | |
| Remark 2 | Part I: Security Requirements Engineering -- 1. A Taxonomy of Vulnerabilities, Attacks, and Security Solutions in Industrial PLCs -- 2. Natural Language Processing with Machine Learning for Security Requirements Analysis - Practical Approaches -- 3. Security Requirements Formalisation with RQCODE -- Part II: Prevention at Development Time -- 4. Vulnerability Detection and Response: Current Status and New Approaches -- 5. Metamorphic Testing for Verification and Fault Localization in Industrial Control Systems -- 6. Interactive Application Security Testing with Hybrid Fuzzing and Statistical Estimators -- Part III: Protection at Operations -- 7. CTAM: a tool for Continuous Threat Analysis and Management -- 8. EARLY - a tool for real-time security attack detection -- 9. A Stream-Based Approach to Intrusion Detection -- 10. Towards Anomaly Detection using Explainable AI. . |
| 520 ## - SUMMARY, ETC. | |
| Summary, etc | This book provides an overview of software security analysis in a DevOps cycle including requirements formalisation, verification and continuous monitoring. It presents an overview of the latest techniques and tools that help engineers and developers verify the security requirements of large-scale industrial systems and explains novel methods that enable a faster feedback loop for verifying security-related activities, which rely on techniques such as automated testing, model checking, static analysis, runtime monitoring, and formal methods. The book consists of three parts, each covering a different aspect of security engineering in the DevOps context. The first part, "Security Requirements", explains how to specify and analyse security issues in a formal way. The second part, "Prevention at Development Time", offers a practical and industrial perspective on how to design, develop and verify secure applications. The third part, "Protection at Operations", eventually introducestools for continuous monitoring of security events and incidents. Overall, it covers several advanced topics related to security verification, such as optimizing security verification activities, automatically creating verifiable specifications from security requirements and vulnerabilities, and using these security specifications to verify security properties against design specifications and generate artifacts such as tests or monitors that can be used later in the DevOps process. The book aims at computer engineers in general and does not require specific knowledge. In particular, it is intended for software architects, developers, testers, security professionals, and tool providers, who want to define, build, test, and verify secure applications, Web services, and industrial systems. |
| 650 #0 - SUBJECT ADDED ENTRY--SUBJECT 1 | |
| General subdivision | Testing. |
| 700 1# - AUTHOR 2 | |
| Author 2 | Sadovykh, Andrey. |
| 700 1# - AUTHOR 2 | |
| Author 2 | Truscan, Dragos. |
| 700 1# - AUTHOR 2 | |
| Author 2 | Mallouli, Wissam. |
| 700 1# - AUTHOR 2 | |
| Author 2 | Cavalli, Ana Rosa. |
| 700 1# - AUTHOR 2 | |
| Author 2 | Seceleanu, Cristina. |
| 700 1# - AUTHOR 2 | |
| Author 2 | Bagnato, Alessandra. |
| 856 40 - ELECTRONIC LOCATION AND ACCESS | |
| Uniform Resource Identifier | https://doi.org/10.1007/978-3-031-42212-6 |
| 942 ## - ADDED ENTRY ELEMENTS (KOHA) | |
| Koha item type | eBooks |
| 264 #1 - | |
| -- | Cham : |
| -- | Springer Nature Switzerland : |
| -- | Imprint: Springer, |
| -- | 2024. |
| 336 ## - | |
| -- | text |
| -- | txt |
| -- | rdacontent |
| 337 ## - | |
| -- | computer |
| -- | c |
| -- | rdamedia |
| 338 ## - | |
| -- | online resource |
| -- | cr |
| -- | rdacarrier |
| 347 ## - | |
| -- | text file |
| -- | |
| -- | rda |
| 650 #0 - SUBJECT ADDED ENTRY--SUBJECT 1 | |
| -- | Software engineering. |
| 650 #0 - SUBJECT ADDED ENTRY--SUBJECT 1 | |
| -- | Data protection. |
| 650 #0 - SUBJECT ADDED ENTRY--SUBJECT 1 | |
| -- | Computer programs |
| 650 #0 - SUBJECT ADDED ENTRY--SUBJECT 1 | |
| -- | Cooperating objects (Computer systems). |
| 650 14 - SUBJECT ADDED ENTRY--SUBJECT 1 | |
| -- | Software Engineering. |
| 650 24 - SUBJECT ADDED ENTRY--SUBJECT 1 | |
| -- | Data and Information Security. |
| 650 24 - SUBJECT ADDED ENTRY--SUBJECT 1 | |
| -- | Software Testing. |
| 650 24 - SUBJECT ADDED ENTRY--SUBJECT 1 | |
| -- | Cyber-Physical Systems. |
| 912 ## - | |
| -- | ZDB-2-SCS |
| 912 ## - | |
| -- | ZDB-2-SXCS |
No items available.