Software Engineering Body of Knowledge (SWEBOK) v4.0 is out [pdf]

Re:Software Engineering Body of Knowledge (SWEBOK) v4.0 is o... by tptacek on Monday October 21, 2024 @05:44PM (#41908836)

SWEBOK 4 adds a dedicated section for security, but it's painfully 2012 (testing, for instance, centers on the old industry-driven "SAST" vs. "DAST" distinction). It also promotes stuff like Common Criteria and CVSS. The "domain-specific" security section could have been pulled out of the OWASP wiki from 2012 as well: "cloud", "IOT", "machine learning".

[ Parent | on HN ]

Re:Software Engineering Body of Knowledge (SWEBOK) v4.0 is o... by codetrotter on Monday October 21, 2024 @09:22PM (#41910272)

Are there any freely available books you would recommend for 2024 security in software engineering?

(Freely available in the same sense that the SWEBOK is I mean; you can read it free of charge without DRM and without having to resort to piracy. Doesn't have to be a fully free book that goes as far as to allow modification and redistribution although that is an extra nice bonus if any of your suggested books are like that.)

[ Parent | on HN ]

Re:Software Engineering Body of Knowledge (SWEBOK) v4.0 is o... by mixmastamyk on Tuesday October 22, 2024 @01:21AM (#41911429)

Believe it is supposed to be slow-moving, keeping to settled matters. Have those fallen out of favor, or shown to be wrong already?

[ Parent | on HN ]

Re:Software Engineering Body of Knowledge (SWEBOK) v4.0 is o... by tptacek on Tuesday October 22, 2024 @01:33PM (#41916609)

I would not describe SWEBOK's breakdown of software security as "settled".

[ Parent | on HN ]

Re:Software Engineering Body of Knowledge (SWEBOK) v4.0 is o... by glwtta on Wednesday October 23, 2024 @09:08PM (#41930898)

Apparently I am also stuck in 2012 - are we not doing cloud and machine learning anymore?

[ Parent | on HN ]