Chapter 13, Problem 13.1E

Explain the important differences between application security engineering and infrastructure security engineering.

Explanation of Solution

Difference between application security engineering and infrastructure security engineering:

While considering security issues, one needs to consider both application software and the infrastructure on which system is built.

The difference between application security engineering and infrastructure security engineering are mentioned below:

Application Security Engineering	Infrastructure Security Engineering
Application security engineering is a problem in software engineering where engineers should ensure that the system is designed to resist attacks.	Infrastructure Security Engineering is management problem in which the system manages to configure the infrastructure to resist attacks.
It is important as software engineering is concerned with the evolution and development of systems that can resist malicious attacks.	As infrastructures components are widely available, the majority of attacks hence focus on system infrastructures.
Application security improves the security of an application often by finding, fixing and preventing security vulnerabilities.	System managers have to set up the infrastructure in order to make effective use of infrastructure security features available and fix the infrastructure security vulnerabilities.
It uses software, hardware, and procedural methods to protect applications from external threats.	It is primarily concerned with making sure that data in any form is kept secure in terms of preserving its confidentiality, integrity and availability.