Introduction to secure software engineering: definition, basic concepts, security requirements. Data flow analysis: trust boundary analysis, data flow minimization, attack surface analysis and reduction. Threat modeling: asset-centric, attacker-centric, software-centric. Secure design: secure design principles, secure design patterns, defense-in-depth. Web security: threats, attacks, vulnerabilities, mitigations. Managed code security: threats, attacks, vulnerabilities, mitigations. Enterprise system security: threats, attacks, vulnerabilities, mitigations. Security testing: security requirements testing, threat mitigation testing, security testing tools, penetration testing. Secure software solution: secure software deployment, peripheral security tools, secure software operations.