As a consequence of the wide distribution of software and software infrastructure, information security and safety depend on the quality and excellent understanding of its functioning. Only if this functionality is guaranteed as safe, customer and information are protected against adversarial attacks and malfunction. A vast proportion of information exchange is dominated by computer systems. Due to the fact that technical systems are more or less interfaced with software systems, most information exchange is closely related to software and computer systems.

As a consequence of the wide distribution of software and software infrastructure, information security and safety depend on the quality and excellent understanding of its functioning. Only if this functionality is guaranteed as safe, customer and information are protected against adversarial attacks and malfunction. A vast proportion of information exchange is dominated by computer systems. Due to the fact that technical systems are more or less interfaced with software systems, most information exchange is closely related to software and computer systems. Information safety and security of software systems depend on the quality and excellent understanding of its functioning. The last few years have shown a renewed interest in formally specifying and verifying software and its role in engineering methods. Within the last decade, interactive program verifiers have been applied to control software and other critical applications. Software model checking has made strides into industrial applications and a number of research tools for bug detection have been built using automatic program-verification technology. Such solutions are high-level programming methods which provide strategies to ensure information security in complex software systems by automatically verified correctness. Based on the specific needs in applications of software technology, models and formal methods must serve the needs and the quality of advanced software engineering methods. This book provides an in-depth presentation of state-of-the-art topics on how to meet such challenges covering both theoretical foundations and industrial practice.

To make communication and computation secure against catastrophic failure and malicious interference, it is essential to build secure software systems and methods for their development. This book describes the ideas on how to meet these challenges in software engineering.

Based on the specific needs in applications of software technology, models and formal methods must serve the needs and the quality of advanced software engineering methods. This book provides a presentation of topics on how to meet such challenges covering both theoretical foundations and industrial practice.

Software Security Engineering draws extensively on the systematic approach developed for the Build Security In (BSI) Web site. Sponsored by the Department of Homeland Security Software Assurance Program, the BSI site offers a host of tools, guidelines, rules, principles, and other resources to help project managers address security issues in every phase of the software development life cycle (SDLC). The book’s expert authors, themselves frequent contributors to the BSI site, represent two well-known resources in the security world: the CERT Program at the Software Engineering Institute (SEI) and Cigital, Inc., a consulting firm specializing in software security. This book will help you understand why Software security is about more than just eliminating vulnerabilities and conducting penetration tests Network security mechanisms and IT infrastructure security services do not sufficiently protect application software from security risks Software security initiatives should follow a risk-management approach to identify priorities and to define what is “good enough”–understanding that software security risks will change throughout the SDLC Project managers and software engineers need to learn to think like an attacker in order to address the range of functions that software should not do, and how software can better resist, tolerate, and recover when under attack

This first-of-its-kind resource offers a broad and detailed understanding of software systems engineering from both security and safety perspectives. Addressing the overarching issues related to safeguarding public data and intellectual property, the book defines such terms as systems engineering, software engineering, security, and safety as precisely as possible, making clear the many distinctions, commonalities, and interdependencies among various disciplines. You explore the various approaches to risk and the generation and analysis of appropriate metrics. This unique book explains how processes relevant to the creation and operation of software systems should be determined and improved, how projects should be managed, and how products can be assured. You learn the importance of integrating safety and security into the development life cycle. Additionally, this practical volume helps identify what motivators and deterrents can be put in place in order to implement the methods that have been recommended.

For the last century, the automotive industry has been dominated by internal combustion engines. Their flexibility of application, driving range, performance and sporty characteristics has resulted in several generations of this technology and has formed generations of engineers. But that is not the end of the story. Stricter legislation and increased environmental awareness have resulted in the development of new powertrain technologies in addition and parallel to the highly optimized internal combustion engine. Hybrid powertrains systems, pure battery electric systems and fuel cell systems, in conjunction with a diverse range of applications, have increased the spectrum of powertrain technologies. Furthermore, automated driving together with intelligent and highly connected systems are changing the way to get from A to B. Not only is the interaction of all these new technologies challenging, but also several different disciplines have to collaborate intensively in order for new powertrain systems to be successfully developed. These new technologies and the resulting challenges lead to an increase in system complexity. Approaches such as systems engineering are necessary to manage this complexity. To show how systems engineering manages the increasing complexity of modern powertrain systems, by providing processes, methods, organizational aspects and tools, this book has been structured into five parts. Starting with Challenges for Powertrain Development, which describes automotive-related challenges at different levels of the system hierarchy and from different point of views. The book then continues with the core part, Systems Engineering, in which all the basics of systems engineering, model-based systems engineering, and their related processes, methods, tools, and organizational matters are described. A special focus is placed on important standards and the human factor. The third part, Automotive Powertrain Systems Engineering Approach, puts the fundamentals of systems engineering into practice by adding the automotive context. This part focuses on system development and also considers the interactions to hardware and software development. Several approaches and methods are presented based on systems engineering philosophy. Part four, Powertrain Development Case Studies, adds the practical point of view by providing a range of case studies on powertrain system level and on powertrain element level and discusses the development of hybrid powertrain, internal combustion engines, e-drives, transmissions, batteries and fuel cell systems. Two case studies on a vehicle level are also presented. The final part, Outlook, considers the development of systems engineering itself with particular focus on information communication technologies. Even though this book covers systems engineering from an automotive perspective, many of the challenges, fundamental principles, conclusions and outlooks can be applied to other domains too. Therefore, this book is not only relevant for automotive engineers and students, but also for specialists in scientific and industrial positions in other domains and anyone who has to cope with the challenge of successfully developing complex systems with a large number of collaborating disciplines.