IT-Governance, Sarbanes-Oxley Act, Basel II: Information Lifecycle Management (ILM) ist ein Thema, das alle CIO's beherrschen m ssen. Die Autoren fassen Information als Produkt auf, das einem Lebenszyklus unterliegt. Jede Phase dieses Produktlebenszyklus erfordert andere IT-Methoden, um Information kostenbewusst zu speichern, sowie zu be- und verarbeiten. Die Autoren erl utern die Gesetzeslage, Klassifizierungs- und Sicherheitskonzepte sowie deren Anforderungen an Betriebsf hrung und Unternehmen. Ausf hrlich: Qualit ts- und Risikomanagement. Plus: Disaster Recovery als Bestandteil der Security-Strategie und Betrachtung der globalen Aspekte.

Save time and trouble building object-oriented, functional, and concurrent applications with Scala. The latest edition of this comprehensive cookbook is packed with more than 250 ready-to-use recipes and 1,000 code examples to help you solve the most common problems when working with Scala 3 and its popular libraries. Scala changes the way you think about programming--and that's a good thing. Whether you're working on web, big data, or distributed applications, this cookbook provides recipes based on real-world scenarios for both experienced Scala developers and programmers just learning to use this JVM language. Author Alvin Alexander includes practical solutions from his experience using Scala for component-based, highly scalable applications that support concurrency and distribution. Recipes cover: Strings, numbers, and control structures Classes, methods, objects, traits, packaging, and imports Functional programming techniques Scala's wealth of collections classes and methods Building and publishing Scala applications with sbt Actors and concurrency with Scala Future and Akka Typed Popular libraries, including Spark, Scala.js, Play Framework, and GraalVM Types, such as variance, givens, intersections, and unions Best practices, including pattern matching, modules, and functional error handling

Das Konzept des Service Engineering, das Vorgehensweisen und Methoden fA1/4r die schnelle und effiziente Realisierung von Dienstleistungen bietet, findet zunehmend Verbreitung in der Praxis. Um die Verfahren mAglichst gewinnbringend einsetzen zu kAnnen, gilt es, den Dienstleistungsprozess auch durch geeignete Informationssysteme zu unterstA1/4tzen. Dieses Buch gibt einen fundierten Einblick in aktuelle softwaretechnische Konzepte und prAsentiert praktische Erfahrungen aus deren Anwendung bei Entwicklungsprojekten. Es richtet sich gleichermaAen an Praktiker in Dienstleistungsunternehmen und Affentlichen Verwaltungen sowie an Mitarbeiter produzierender Unternehmen, die ihr Dienstleistungsangebot systematisieren und ausbauen wollen.

Smart cards are playing an increasingly important role in areas such as ban- 1 king,electroniccommerce,andtelecommunications. TheJavaCard language hasbeenproposedasahigh-levellanguageforprogrammingmulti-application smartcards. Theuseofahigh-levellanguagecanfacilitatethedevelopmentand veri?cation of software for smart cards. The modest code size and the imp- tanceoftheapplicationareasimpliesthatitisbothpossibleanddesirableto developandapplyformalmethodsintheconstructionofsafeandsecureJava Cardsoftware. ThepresentvolumeconstitutestheproceedingsoftheJavaCardworkshop heldinCannes,14September2000. TheworkshopgrewoutoftheINRIAAction deRechercheCoop'erative"JavaCard"andwasorganizedincollaborationwith the Java Card Forum. A call for papers resulted in 14 submissions of which theprogramcommitteeselected11papersforpresentationattheworkshop. In addition,theworkshopfeaturedaninvitedtalkbyDanielLeM'etayer,Trusted Logic,onformalmethodsandsmartcardsecurity. WewishtothankCatherine Godest and Maryse Renaud for their help with preparing the proceedings for thisworkshop. February2001IsabelleAttali ThomasJensen 1 ItshouldbenotedthatJavaCardisatrademarkofSunMicrosystems. Organization ProgramCommittee ProgramChair: IsabelleAttali(INRIA,France) ThomasJensen(IRISA/CNRS,France) Committeemembers: ChristianGoire(BullCP8,France) SebastianHans(SunMicrosystems,USA) PieterHartel(UniversityofSouthampton,UK) PeterHoneyman(UniversityofMichigan,USA) PierreParadinas(Gemplus,France) JoachimPosegga(SAPCorporateResearch,Germany) TableofContents InvitedTalk FormalMethodsinContext:SecurityandJavaCard ...1 D. Bolignano,D. LeM'etayer,C. Loiseaux ContributedPapers ADynamicLogicfortheFormalVeri?cationofJavaCardPrograms ...6 BernhardBeckert ThePACAPPrototype:AToolforDetectingJavaCardIllegalFlow ...25 P. Bieber,J. Cazin,A. ElMarouani,P. Girard,J. -L. Lanet,V. Wiels, G. Zanon CardKt:AutomatedMulti-modalDeductiononJavaCardsfor Multi-applicationSecurity...38 RajeevGor'e,LanDuyNguyen A Programming and a Modelling Perspective on the Evaluation of Java CardImplementations...52 PieterH. Hartel,EduarddeJong SecureInternetSmartcards...73 NaomaruItoi,TomokoFukuzawa,PeterHoneyman IssuesinSmartcardMiddleware...90 RogerKehr,MichaelRohs,HaraldVogt OpenPlatfomSecurity ...98 MarcKekiche?,ForoughKashef,DavidBrewer ASimple(r)InterfaceDistributionMechanismforJavaCard ...1 14 KsheerabdhiKrishna,MichaelMontgomery AutomaticTestGenerationforJavaCardApplets ...121 HuguesMartin,LydieduBousquet FormalSpeci?cationandVeri?cationofJavaCard'sApplicationIdenti?er Class...137 JoachimvandenBerg,BartJacobs,ErikPoll X TableofContents Security on Your Hand: Secure Filesystems with a "Non-cryptographic" JAVA-Ring...151 R..udigerWeis,BastiaanBakker,StefanLucks AuthorIndex ...163 Formal Methods in Context: Security and Java Card D. Bolignano, D. Le Metayer, and C. Loiseaux Trusted Logic www. trusted-logic. fr 1. Security and Java Card: An Ideal Application Area for Formal Methods The benefits of formal methods for software engineering have been described at length in many research papers. They include among others: Better understanding and improved communication through unambiguous descriptions. Early bug detection thanks to the formalisation of specifications.

Packed with lots of examples and illustrations, including an 8-page colour section, Essential Java 3D fast is an introductory textbook for those who want to learn Java 3D fast.The best way to learn any programming language is by writing programs. In this book, Ian Palmer takes you through the steps to write a simple program in Java 3D, and then shows you how to modify and add features to this program, so you learn the key features of Java 3D.Learn about: Writing a simple Java 3D program;Creating Shapes;Defining Appearance;Animation;Behaviours.The examples in this book assume a working knowledge of Java and some background in 3D graphics, in order to explain the new concepts in Java 3D.

The Collections Framework is supplied with all versions of the Java 2 platform and provides programmers with incredibly efficient ways to manipulate data. However, given the large number of methods and classes in this library, using them correctly is hardly a cakewalk. Well-known columnist and bestselling author John Zukowski gives the Java professional exactly what he or she needs to know about this vital library in order to maximize productivity. This practical book contains comprehensive coverage of the important Collections Framework from the working programmer's point of view, while staying away from academic abstractions.

"Java Collections" leads you through the standard Java support for maintaining abstract groups of data, from the historical collection classes available since the inception of Java time, through the Collections Framework introduced with the Java 2 platform, and on to third-party alternative libraries for times when the standard support isn't enough. If you're working with data in Java programs, you need to understand the Collections Framework. Let Zukowski's "Java Collections" be your guide Table of Contents Java Collections Framework: An Overview Arrays The Vector and Stack Classes The Enumeration Interface The Dictionary, Hashtable, and Properties Classes The BitSet Class Collections Introduction Sets Lists Maps Sorting Special Collections Support Array Algorithm Support Custom Implementations Compatibility Issues Advanced Usages JGL Libraries util.concurrent Colt

Essential ColdFusion fast gives the reader a working knowledge of ColdFusion and how to use it and how it integrates with other web-based technologies. Lots of working examples are included throughout, all of which are also available via a web-site that is powered by ColdFusion, which shows exactly how they work.Matthew Norman has written a 'get started quick' guide to ColdFusion, in the style of the Essential series, describing the setting up of a development system. He talks about how to achieve this on a budget, using techniques that are applicable to large scale operations as well.Anyone with a working knowledge of the internet, and who wants to learn more about what ColdFusion does and how they can start using it quickly, will find this book a real help.

Create more robust applications with a test-first approach to JavaScript Reliable JavaScript, How to Code Safely in the World's Most Dangerous Language demonstrates how to create test-driven development for large-scale JavaScript applications that will stand the test of time and stay accurate through long-term use and maintenance. Taking a test-first approach to software architecture, this book walks you through several patterns and practices and explains what they are supposed to do by having you write unit tests. Write the code to pass the unit tests, so you not only develop your technique for structuring large-scale applications, but you also learn how to test your work. You'll come away with hands-on practice that results in code that is correct from the start, and has the test coverage to ensure that it stays correct during subsequent maintenance. All code is provided both in the text and on the web, so you can immediately get started designing more complete, robust applications. JavaScript has graduated from field-validation scripts to full-scale applications, but many developers still approach their work as if they were writing simple scripts. If you're one of those developers, this book is the solution you need to whip your code into shape and create JavaScript applications that work. * Write more concise and elegant code by thinking in JavaScript * Test the implementation and use of common design patterns * Master the use of advanced JavaScript features * Ensure your code's conformance to your organization's standards If you're ready to step up your code and develop more complete software solutions, Reliable JavaScript is your essential resource.

This second edition of Foundations of Python Network Programming targets Python 2.5 through Python 2.7, the most popular production versions of the language. Python has made great strides since Apress released the first edition of this book back in the days of Python 2.3. The advances required new chapters to be written from the ground up, and others to be extensively revised. You will learn fundamentals like IP, TCP, DNS and SSL by using working Python programs; you will also be able to familiarize yourself with infrastructure components like memcached and message queues. You can also delve into network server designs, and compare threaded approaches with asynchronous event-based solutions. But the biggest change is this edition's expanded treatment of the web. The HTTP protocol is covered in extensive detail, with each feature accompanied by sample Python code. You can use your HTTP protocol expertise by studying an entire chapter on screen scraping and you can then test lxml and BeautifulSoup against a real-world web site. The chapter on web application programming now covers both the WSGI standard for component interoperability, as well as modern web frameworks like Django. Finally, all of the old favorites from the first edition are back: E-mail protocols like SMTP, POP, and IMAP get full treatment, as does XML-RPC. You can still learn how to code Python network programs using the Telnet and FTP protocols, but you are likely to appreciate the power of more modern alternatives like the paramiko SSH2 library. If you are a Python programmer who needs to learn the network, this is the book that you want by your side.

Build stylish, slick, and speedy-to-load user interfaces in React without writing custom classes. React Hooks are a new category of functions that help you to manage state, lifecycle and side effects within functional components. React Hooks in Action teaches you to use pre-built hooks like useState, useReducer and useEffect, and to build your own hooks. Your code will be more reusable, require less boilerplate, and you'll instantly be a more effective React developer. About the technology React Hooks promise to make React programmers even more productive. Hooks are a collection of pre-built and custom functions that give you a simpler API for working with key React functionalities. Hooks cleanly encapsulate side effects, make it easier to reuse components between projects, and result in less code overall. These new features represent a fundamental evolution in how the React library functions, so even experienced React developers will want to get up to speed with Hooks. About the book React Hooks in Action shows you how to use Hooks to make your codebase simpler and more reusable, and your applications faster and more responsive. You'll build a resource booking example application chapter by chapter, learning how to develop components with local, shared, and application states. You'll discover different approaches to data fetching, including using Concurrent Mode and Suspense to improve user experience, and explore third party hooks in the evolving React ecosystem. What's inside Create a Redux store and interact with it via Hooks Use code-splitting to improve the responsiveness of your apps Build functional components that can update their own state Manage component side effects Use the React Suspense API to improve the user experience of page and data loading About the reader For front-end web developers experienced with React. About the author John Larsen is the author of Get Programming with JavaScript. He was a mathematics and computing teacher for 25 years. He has an MA in mathematics and an MSc in information technology, and an ongoing interest in educational research. A web developer since 2000, he uses JavaScript end-to-end for server-side and client-side programming.

To understand Jini, imagine that you could move to a new office across the world, or check into any hoteland could simply plug your notebook or Palm directly into the local network. Your device would immediately be recognized, and you would have access to the services at that location"transparently."

Jini is Sun's Java-based technology, with potential to make transparant, "universal plug and play" a reality. This book is an expanded, updated version of the most popular online tutorial for Jini. Author Jan Newmarch includes comprehensive Jini advancements announced at Java One in June 2000. And he includes other important topics, like how Enterprise Java Beans blend in with the Jini framework and how CORBA fits in as well.

Fully updated for the Java 2 Platform, Standard Edition version 5.0, the third edition of this praised book is a one-stop resource for serious Java developers. This book shows you the parts of Java Swing API that you will use daily to create graphical user interfaces (GUI). You will also learn about the Model-View-Controller architecture that lies behind all Swing components, and about customizing components for specific environments. Author John Zukowski also provides custom editors and renderers for use with tables, trees, and list components. You'll encounter an overview of Swing architecture, and learn about core Swing components, toggelable components, event handling with the Swing Component Set, Swing menus and toolbars, borders, pop-ups, choosers, and more.

Das Buch zeigt, welche Potentiale sich f r Unternehmen durch eine konsequente Orientierung an den Kundenprozessen und einer kooperativen Zusammenarbeit zwischen Unternehmen ergeben. Eine wichtige Rolle nehmen dabei elektronische Dienstleister (sogenannte WebService-Anbieter) ein, die diese Kooperationsprozesse erst erm glichen oder die elektronischen Services viel effizienter erbringen als jedes einzelne Unternehmen im Netzwerkverbund, z.B. f r den Zahlungsverkehr und die Logistik. Dazu werden anhand anschaulicher Beispiele aus der Praxis methodische Vorschl ge zur Gestaltung des Kundenprozesses, zum Portaldesign und zur Kooperationsprozessanalyse und Out-tasking sowie Architekturen f r Kooperationsprozesse und WebServices entwickelt.

This is a book about computer programming for everyone: artist, poet, student, doctor, accountant, or engineer. This book will show students how to write understandable computer programs in Java. While emphasizing general principles of programming this book: - uses examples from the humanities only, requiring no math or engineering knowledge -explains all programming concepts by means of complete programs -concentrates on exercises solved by writing complete programs -takes the reader from text input/output to object-oriented programming in the equivalent of a one semester class. -gives the reader a solid background for follow-on courses on the graphics and networking facilities of Java. This book is a sound and complete introduction to programming. Although the book uses Java, the same methods can be used for systematic programming in other languages, such as C, Fortran, and Pascal.

Essential Dynamic HTML fast provides a step-by-step approach to discovering DHTML and its techniques - everything you need to know from standard HTML tags to Layers and DOM (Document Object Model). You'll learn everything you need to know to build a dynamic web site - starting from choosing which font to use, to using dynamic positioning and contents, and how to incorporate audio, video and animation, and Scripting. Start with basic HTML tags. See what makes a site interactive. Learn about multimedia effects. Discover Cascade Style Sheets (CSS): dynamic web pages. Understand Document Object Model (DOM) and layers. And learn how to manage dynamic sites: from layout to after design.Written in the inimitable style of the Essentials series, this book tells you everything you need to know to get your first project up and running, with lots of tips on how to manage a dynamic site and resourceful URL addresses.

Der St. Galler Ansatz zum Business Knowledge Management f hrt Erfahrungen aus einer zunehmenden Anzahl von Praxisprojekten zusammen: Zahlreiche Fallstudien und Anwendungsbeispiele aus Telekommunikation, Finanzdienstleistung, Beratung und Industrie zeigen, wie Unternehmen durch Wissensmanagement sowohl ihre Kundenorientierung und Innovationsgeschwindigkeit als auch ihren Unternehmenswert erh hen. Das daraus abgeleitete Gesamtmodell setzt Wissensmanagement in Beziehung zu neuen Gesch ftsmodellen des Informationszeitalters. Es demonstriert, was neue Instrumente der F hrung und Wissensorganisation zur verbesserten Wissensentwicklung und -nutzung in Gesch ftsprozessen beitragen k nnen. "Knowledge Portals" erweitern die technologischen M glichkeiten des Wissensmanagements. Zwei Beitr ge identifizieren die wesentlichen Komponenten und beschreiben typische Praxisanwendungen von Knowledge Portals.

In diesem Werk zum Thema Software-Architekturen veranschaulichen drei international renommierte Experten den Zusammenhang zwischen Prinzipien, Standardarchitekturen und praxisrelevanten Problemstellungen aus den Bereichen Web Services, Peer-to-Peer, Workflow und weiteren Anwendungsgebieten. Dieses Buch richtet sich an Praktiker, Software-Projektmanager und Studenten der Informatik/Wirtschaftsinformatik, die fur Design und Entwicklung von grossen verteilten Softwaresystemen verantwortlich oder am Einsatz solcher Systeme in ihrem Arbeitsbereich interessiert sind. Hier wird erstmals der "State of the Art" in der Forschung industrierelevant und verstandlich umgesetzt. Die Autoren konnen auf jahrelange Erfahrung im Forschungs- und Entwicklungsbereich im Rahmen von grossen multinationalen Entwicklungsprojekten verweisen."

If you are a new programmer or a Java programmer moving to Java 2 then this is the book for you! It offers: a complete introduction to Java 2; describes the language and many of its class libraries; shows how they are used; describes the key concepts of object orientation with lots of examples of how to apply the theory. This book will show you how to take advantage of Java 2's new features (such as the abstract windowing toolkit and the Swing classes) for creating graphical user interfaces. John Cowell explains how to use Swing components to change the look and feel of your Java applications so that they look like Windows, Mac or Motif applications. Sun Microsystems Java 2 (formerly called the Java Development Kit 1.2 - JDK 1.2) is a major step forward in the growth of Java into a powerful mature language for writing both applications and applets. Topics covered in this book include: the Java language; the abstract windowing toolkit; the new Java Swing components; handling component, keyboard and mouse events; polymorphism and inheritance; animation and multithreading; handling exceptions; using files. Essential Java 2 - fast is designed for professional developers or students who need to learn the maximum in the minimum time. You'll develop applications and applets fast, learning everything you need to write Java applications and applets quickly with Java.

This practical guide provides a complete introduction to developing network programs with Java. You'll learn how to use Java's network class library to quickly and easily accomplish common networking tasks such as writing multithreaded servers, encrypting communications, broadcasting to the local network, and posting data to server-side programs. Author Elliotte Rusty Harold provides complete working programs to illustrate the methods and classes he describes. This thoroughly revised fourth edition covers REST, SPDY, asynchronous I/O, and many other recent technologies. Explore protocols that underlie the Internet, such as TCP/IP and UDP/IP Learn how Java's core I/O API handles network input and output Discover how the InetAddress class helps Java programs interact with DNS Locate, identify, and download network resources with Java's URI and URL classes Dive deep into the HTTP protocol, including REST, HTTP headers, and cookies Write servers and network clients, using Java's low-level socket classes Manage many connections at the same time with the nonblocking I/O

Get up to speed on Scala--the JVM, JavaScript, and natively compiled language that offers all the benefits of functional programming, a modern object model, and an advanced type system. Packed with code examples, this comprehensive book shows you how to be productive with the language and ecosystem right away. You'll learn why Scala is ideal for building today's highly scalable, data-centric applications, while maximizing developer productivity. While Java remains popular and Kotlin has become popular, Scala hasn't been sitting still. This third edition covers the new features in Scala 3.0 with updates throughout the book. Programming Scala is ideal for beginning to advanced developers who want a complete understanding of Scala's design philosophy and features with a thoroughly practical focus. Program faster with Scala's succinct and flexible syntax Dive into basic and advanced functional programming techniques Build killer big data and distributed apps using Scala's functional combinators and tools like Spark and Akka Create concise solutions to challenging design problems with the sophisticated type system, mixin composition with traits, pattern matching, and more

Present information in stunning new ways by transforming CSS elements in two- and three-dimensional space. Whether you're rotating a photo, doing some interesting perspective tricks, or creating an interface that lets you reveal information on an element's backside, this practical guide shows you how to use them to great effect. Short and sweet, this book is an excerpt from the upcoming fourth edition of CSS: The Definitive Guide. When you purchase either the print or the ebook edition of Transforms in CSS, you'll receive a discount on the entire Definitive Guide once it's released. Why wait? Learn how to bring life to your web pages now. Create interesting combinations of 2D transforms and fully 3D-acting interfaces Learn two types of coordinate systems used in CSS transforms: the Cartesian coordinate system and the spherical system Use the transform property to translate, scale, rotate, and skew an element Create the illusion of depth by adding perspective to an element-or one perspective to a group of elements Reveal the back of an element with the backface-visibility property

LCPC'98 Steering and Program Committes for their time and energy in - viewing the submitted papers. Finally, and most importantly, we thank all the authors and participants of the workshop. It is their signi cant research work and their enthusiastic discussions throughout the workshopthat made LCPC'98 a success. May 1999 Siddhartha Chatterjee Program Chair Preface The year 1998 marked the eleventh anniversary of the annual Workshop on Languages and Compilers for Parallel Computing (LCPC), an international - rum for leading research groups to present their current research activities and latest results. The LCPC community is interested in a broad range of te- nologies, with a common goal of developing software systems that enable real applications. Amongthetopicsofinteresttotheworkshoparelanguagefeatures, communication code generation and optimization, communication libraries, d- tributed shared memory libraries, distributed object systems, resource m- agement systems, integration of compiler and runtime systems, irregular and dynamic applications, performance evaluation, and debuggers. LCPC'98 was hosted by the University of North Carolina at Chapel Hill (UNC-CH) on 7 - 9 August 1998, at the William and Ida Friday Center on the UNC-CH campus. Fifty people from the United States, Europe, and Asia attended the workshop. The program committee of LCPC'98, with the help of external reviewers, evaluated the submitted papers. Twenty-four papers were selected for formal presentation at the workshop. Each session was followed by an open panel d- cussion centered on the main topic of the particular session.

Intended to teach readers Java and object orientation, as well as presenting object oriented design and analysis, Java for Practitioners is written such that it is possible to dip into chapters as required. It introduces concepts by getting the reader to follow exercises, rather than by extensive discussion, and includes the new release 1.2 of Java. Practicals are included at the of each chapter, as well as the Java Self-Tester, designed to allow readers to determine whether they are ready to take the Sun Java Certification exam, and follows a similar format and style to the actual Online Certification Examination. In short, a thoroughly comprehensive guide.

Java, undoubtedly, has its roots in embedded systems and the Web. Nevertheless, it is a fully functional high-level programming language that can provide users with a wide range of functionality and versatility. This thoroughly cross-reviewed state-of-the-art survey is devoted to the study of the syntax and semantics of Java from a formal-methods point of view. It consists of the following chapters by leading researchers: Formal Grammar for Java; Describing the Semantics of Java and Proving Type Soundness; Proving Java Type Soundness; Machine-Checking the Java Specification: Proving Type-Safety; An Event-Based Structural Operational Semantics of Multi-Threaded Java Dynamic Denotational Semantics of Java; A Programmer's Reduction Semantics for Classes and Mixins; A Formal Specification of Java Virtual Machine Instructions for Objects, Methods and Subroutines; The Operational Semantics of a Java Secure Processor; A Programmer Friendly Modular Definition of the Semantics of Java.

Cyberattacks are becoming more commonplace and the Open Web Application Security Project (OWASP), estimates 94% of sites have flaws in their access control alone. Attacks evolve to work around new defenses, and defenses must evolve to remain effective. Developers need to understand the fundamentals of attacks and defenses in order to comprehend new techniques as they become available. This book teaches you how to write secure web applications. The focus is highlighting how hackers attack applications along with a broad arsenal of defenses. This will enable you to pick appropriate techniques to close vulnerabilities while still providing users with their needed functionality. Topics covered include: A framework for deciding what needs to be protected and how strongly Configuring services such as databases and web servers Safe use of HTTP methods such as GET, POST, etc, cookies and use of HTTPS Safe REST APIs Server-side attacks and defenses such as injection and cross-site scripting Client-side attacks and defenses such as cross-site request forgery Security techniques such as CORS, CSP Password management, authentication and authorization, including OAuth2 Best practices for dangerous operations such as password change and reset Use of third-party components and supply chain security (Git, CI/CD etc) What You'll Learn Review the defenses that can used to prevent attacks Model risks to better understand what to defend and how Choose appropriate techniques to defend against attacks Implement defenses in Python/Django applications Who This Book Is For Developers who already know how to build web applications but need to know more about security Non-professional software engineers, such as scientists, who must develop web tools and want to make their algorithms available to a wider audience. Engineers and managers who are responsible for their product/company technical security policy