Software Security by Design

Secure by Design is an important approach to ensure software security and reliability. It has already been developing for more than 50 years, but its principles and techniques are still not well known among the wide community of software developers. To make this approach more popular, we need to redefine its goals and problems, classify and explain its techniques, as well as outline trends for its future development. This paper reformulates the main Secure by Design principles, provides some examples of secure design patterns and anti-patterns, and explores relationships between this approach and software architecture analysis methods, hardening techniques, and secure programming languages.