第1 章 軟件與軟件安全······································································································1
1.1 軟件安全范疇········································································································1
1.1.1 軟件與軟件安全的定義····················································································1
1.1.2 軟件缺陷與漏洞·····························································································3
1.1.3 軟件漏洞分類································································································6
1.1.4 軟件安全與其他安全的關(guān)系···········································································.12
1.2 軟件安全現(xiàn)狀·····································································································.15
1.2.1 軟件安全總體情況·······················································································.15
1.2.2 系統(tǒng)軟件安全現(xiàn)狀·······················································································.17
1.2.3 應(yīng)用軟件安全現(xiàn)狀·······················································································.18
1.2.4 開源軟件安全現(xiàn)狀·······················································································.19
1.3 安全事件的根源··································································································.21
1.3.1 軟件漏洞是安全問題的焦點···········································································.21
1.3.2 產(chǎn)生軟件漏洞的原因····················································································.24
1.4 緩解軟件安全問題的途徑與方法··········································································.27
1.4.1 緩解軟件安全問題的基本策略········································································.27
1.4.2 緩解軟件安全問題的工程化方法·····································································.28
1.4.3 軟件安全問題的標(biāo)準(zhǔn)化、規(guī)范化解決之路·························································.29
1.4.4 緩解軟件安全問題的技術(shù)探索與舉措·······························································.31
實踐任務(wù)···················································································································.34
任務(wù)1：相對路徑攻擊···························································································.34
任務(wù)2：SQL 注入攻擊··························································································.35
思考題······················································································································.35
第2 章 軟件的工程化安全方法·························································································.36
2.1 軟件工程概述·····································································································.36
2.1.1 軟件的發(fā)展過程··························································································.36
2.1.2 軟件危機···································································································.37
2.1.3 軟件工程···································································································.38
2.1.4 軟件生命周期·····························································································.40
2.2 軟件過程模型·····································································································.43
2.2.1 瀑布模型···································································································.44
2.2.2 快速原型模型·····························································································.45
2.2.3 增量模型···································································································.46
2.2.4 螺旋模型···································································································.47
2.2.5 微軟MSF 過程模型······················································································.48
2.3 軟件質(zhì)量與軟件的安全特性·················································································.49
2.3.1 軟件質(zhì)量···································································································.50
2.3.2 軟件的安全特性··························································································.52
2.3.3 軟件安全特性與軟件質(zhì)量的關(guān)系·····································································.53
2.3.4 確定所需安全特性·······················································································.54
2.3.5 改善軟件的安全特性····················································································.55
2.3.6 功能安全、安全功能與軟件安全·····································································.59
2.4 軟件安全過程模型······························································································.59
2.4.1 微軟SDL 模型····························································································.60
2.4.2 安全接觸點過程模型····················································································.64
2.4.3 實施軟件安全過程的建議··············································································.68
2.5 軟件安全開發(fā)初體驗···························································································.72
2.5.1 賬號安全···································································································.72
2.5.2 簡單的口令驗證及其破解示例········································································.74
2.5.3 用戶操作的隨意性·······················································································.77
實踐任務(wù)···················································································································.80
任務(wù)1：網(wǎng)絡(luò)監(jiān)聽與https 的配置··············································································.80
任務(wù)2：MD5 動態(tài)加鹽防篡改·················································································.80
任務(wù)3：暴力破解登錄密碼·····················································································.81
思考題······················································································································.82
第3 章 軟件安全風(fēng)險管理·······························································································.82
3.1 風(fēng)險管理的基本過程與方法·················································································.82
3.1.1 風(fēng)險管理的定義··························································································.82
3.1.2 軟件安全風(fēng)險評估基本要素及其關(guān)系·······························································.83
3.1.3 軟件安全風(fēng)險評估基本流程···········································································.85
3.1.4 手動評估和工具輔助評估··············································································.89
3.1.5 風(fēng)險控制···································································································.90
3.2 軟件安全風(fēng)險評估······························································································.90
3.2.1 評估準(zhǔn)備···································································································.91
3.2.2 軟件安全風(fēng)險識別·······················································································.93
3.2.3 軟件安全風(fēng)險分析·······················································································.95
3.2.4 基于DREAD 模型的威脅評級········································································.97
3.2.5 基于標(biāo)準(zhǔn)的漏洞等級劃分··············································································.99
3.2.6 基于形式化方法的軟件安全風(fēng)險評估·······························································103
3.3 軟件安全風(fēng)險控制······························································································108
3.3.1 基于風(fēng)險管理框架的安全風(fēng)險控制··································································108
3.3.2 基于軟件項目風(fēng)險管理的安全風(fēng)險控制···························································.111
3.3.3 軟件供應(yīng)鏈安全風(fēng)險控制·············································································.111
3.4 軟件安全能力成熟度模型····················································································112
3.4.1 安全性能力成熟度模型·················································································113
3.4.2 軟件保障成熟度模型····················································································117
3.4.3 安全構(gòu)建成熟度模型····················································································125
3.4.4 系統(tǒng)安全工程能力成熟度模型········································································129
實踐任務(wù)···················································································································137
任務(wù)1：Web 安全現(xiàn)狀調(diào)研與Web 應(yīng)用防火墻（WAF）原理分析···································137
任務(wù)2：CWE“軟件開發(fā)視圖”（CWE-699）研習(xí)························································138
思考題······················································································································138
第4 章 軟件需求與安全需求····························································································139
4.1 軟件需求與需求工程···························································································139
4.1.1 軟件需求的定義與分類·················································································139
4.1.2 需求工程概述·····························································································143
4.1.3 安全需求工程·····························································································144
4.2 需求引出············································································································145
4.2.1 需求引出過程·····························································································145
4.2.2 安全需求引出源··························································································147
4.2.3 提取安全需求的基本方法··············································································150
4.3 需求分析建�！ぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁ�150
4.3.1 分析建模的任務(wù)··························································································150
4.3.2 需求分析的基本方法····················································································151
4.3.3 安全需求分析的策略與方法···········································································157
4.3.4 基于誤用例和濫用例的安全需求分析·······························································169
4.4 需求定義與需求驗證···························································································173
4.4.1 需求定義···································································································173
4.4.2 需求驗證···································································································176
4.5 安全質(zhì)量需求工程簡介························································································178
4.6 需求變更及其風(fēng)險控制························································································180
4.6.1 需求變更···································································································180
4.6.2 需求變更的負(fù)面影響····················································································181
4.6.3 需求變更風(fēng)險控制·······················································································182
實踐任務(wù)···················································································································182
任務(wù)1：結(jié)構(gòu)化需求分析························································································182
任務(wù)2：基于誤用例的安全需求分析·········································································183
思考題······················································································································183
第5 章 安全設(shè)計·············································································································184
5.1 軟件設(shè)計概述·····································································································184
5.1.1 軟件設(shè)計基本概念·······················································································184
5.1.2 軟件概要設(shè)計·····························································································184
5.1.3 軟件詳細(xì)設(shè)計·····························································································191
5.2 安全設(shè)計及其原則······························································································191
5.2.1 安全設(shè)計目標(biāo)與設(shè)計內(nèi)容··············································································191
5.2.2 安全設(shè)計原則·····························································································192
5.2.3 制訂安全計劃·····························································································196
5.3 安全策略與安全模型···························································································197
5.3.1 多級安全策略·····························································································197
5.3.2 商業(yè)安全策略·····························································································198
5.3.3 安全模型···································································································199
5.3.4 面向云計算的訪問控制·················································································201
5.4 威脅建�！ぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁ�201
5.4.1 威脅建模的作用··························································································201
5.4.2 威脅建模方法·····························································································202
5.4.3 威脅建模過程·····························································································207
5.4.4 威脅建模示例·····························································································210
5.5 基于復(fù)用的軟件安全設(shè)計····················································································216
5.5.1 攻擊樹及其緩解措施的復(fù)用···········································································216
5.5.2 基于安全模式的軟件設(shè)計··············································································216
5.5.3 常用安全功能設(shè)計·······················································································217
5.6 基于容錯技術(shù)的功能安全設(shè)計··············································································223
5.6.1 軟件容錯···································································································223
5.6.2 基于容錯的抗攻擊措施·················································································225
5.7 軟件體系結(jié)構(gòu)與安全設(shè)計分析··············································································226
5.7.1 軟件體系結(jié)構(gòu)·····························································································226
5.7.2 軟件體系結(jié)構(gòu)復(fù)用·······················································································230
5.7.3 安全體系結(jié)構(gòu)·····························································································234
5.7.4 體系結(jié)構(gòu)分析與安全設(shè)計分析········································································238
5.7.5 安全設(shè)計常見問題·······················································································240
實踐任務(wù)···················································································································240
任務(wù)1：結(jié)構(gòu)化設(shè)計與威脅建�！ぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁぁ�240
任務(wù)2：安全體系結(jié)構(gòu)設(shè)計·····················································································241
任務(wù)3：訪問控制設(shè)計···························································································241
思考題······················································································································242
第6 章 安全編碼與代碼審核····························································································243
6.1 軟件編碼概述·····································································································243
6.1.1 軟件編碼···································································································243
6.1.2 編碼規(guī)范···································································································244
6.1.3 代碼檢查···································································································246
6.2 安全編碼規(guī)范·····································································································247
6.2.1 安全編碼建議·····························································································247
6.2.2 應(yīng)用軟件安全編程國家標(biāo)準(zhǔn)···········································································250
6.2.3 SEI CERT 安全編碼系列標(biāo)準(zhǔn)··········································································257
6.2.4 ISO/IEC C 安全編碼規(guī)則···············································································269
6.2.5 面向特定行業(yè)領(lǐng)域的安全編碼規(guī)則··································································270
6.3 安全編碼過程管理與代碼安全審核·······································································273
6.3.1 安全編碼過程管理·······················································································273
6.3.2 源代碼靜態(tài)安全分析····················································································274
6.3.3 代碼安全審核·····························································································278
實踐任務(wù)···················································································································281
任務(wù)1：安全登錄模塊的實現(xiàn)··················································································281
任務(wù)2：代碼安全分析···························································································282
任務(wù)3：ASLR、DEP 與棧保護················································································282
思考題······················································································································283
第7 章 軟件測試與安全分析····························································································284
7.1 軟件測試············································································································284
7.1.1 軟件測試及其目標(biāo)·······················································································284
7.1.2 軟件測試基本原則·······················································································285
7.1.3 軟件測試分類·····························································································286
7.1.4 軟件測試過程·····························································································289
7.1.5 軟件測試過程模型·······················································································291
7.2 軟件安全測試·····································································································293
7.2.1 安全測試及其與傳統(tǒng)測試的區(qū)別·····································································294
7.2.2 軟件安全測試分類·······················································································295
7.2.3 軟件安全測試基本流程·················································································300
7.3 二進(jìn)制程序安全分析···························································································303
7.3.1 語法語義與二進(jìn)制程序分析···········································································304
7.3.2 二進(jìn)制代碼分析常用技術(shù)··············································································307
7.3.3 二進(jìn)制代碼相似性分析·················································································309
7.4 典型的軟件安全測試技術(shù)····················································································312
7.4.1 典型安全測試技術(shù)概述·················································································312
7.4.2 模糊測試···································································································313
7.4.3 滲透測試···································································································319
7.5 軟件安全合規(guī)性審核···························································································321
實踐任務(wù)···················································································································321
任務(wù)1：基于AWVS 的Web 漏洞掃描·······································································321
任務(wù)2：基于AFL 的模糊測試·················································································322
思考題······················································································································323
第8 章 軟件部署運維與軟件保護·····················································································324
8.1 軟件部署與安全配置···························································································324
8.1.1 軟件部署···································································································324
8.1.2 安全配置···································································································325
8.1.3 應(yīng)用程序的容器化部署·················································································326
8.2 系統(tǒng)運維與應(yīng)急響應(yīng)···························································································327
8.2.1 系統(tǒng)運維···································································································327
8.2.2 應(yīng)急響應(yīng)···································································································328
8.3 軟件保護與軟件加固···························································································330
8.3.1 軟件反逆向分析··························································································330
8.3.2 軟件防篡改································································································333
8.3.3 軟件版權(quán)保護·····························································································335
8.3.4 軟件加固···································································································336
實踐任務(wù)···················································································································338
任務(wù)1：Web 應(yīng)用Java Script 代碼安全發(fā)布································································338
任務(wù)2：Apache HTTP 服務(wù)器安全配置······································································338
思考題······················································································································339
參考文獻(xiàn)··························································································································340