Security engineering

Security engineering is the process of incorporating security controls into an information system so that the controls become an integral part of the system's operational capabilities. It is similar to other systems engineering activities in that its primary motivation is to support the delivery of engineering solutions that satisfy pre-defined functional and user requirements, but it has the added dimension of preventing misuse and malicious behavior. Those constraints and restrictions are often asserted as a security policy. Cybersecurity engineering and privacy engineering focus on information security, computer security, and network security, including protecting data from unauthorized access, use, disclosure, destruction, modification, or disruption to access. Physical security involves deterring attackers from accessing a facility, resource, or information stored on physical media. Security engineering involves aspects of social science, psychology (such as designing a system to "fail well", instead of trying to eliminate all sources of error), economics (see economics of security), mathematics, and architecture. Some of the techniques used, such as fault tree analysis, are derived from safety engineering.