Posts

Security Architecture and Design

Security Architecture and Design describes fundamental logical hardware, operating system, and software security components, and how to use those components to design, architect, and evaluate secure computer systems. Security Architecture and Design is a three-part domain.  The first part  covers the hardware and software required to have a secure computer system.  The second part  covers the logical models required to keep the system secure, and  the third part  covers evaluation models that quantify how secure the system really is. Secure system design concepts Layering  separates hardware and software functionality into modular tiers. A generic list of security architecture layers is as follows: 1. Hardware 2. Kernel and device drivers 3. Operating System 4. Applications Abstraction  hides unnecessary details from the user. Complexity is the enemy of security: the more complex a process is, the less se...