About

Here is Shahzad Sarwar, A Software Architect by profession. My personal blog is located at http://shahzadsb.wordpress.com

This blog will cover Software Security part of my career.

Information security or Software security means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification or destruction.

The terms information security, computer security and information assurance are frequently incorrectly used interchangeably. These fields are interrelated often and share the common goals of protecting the confidentiality, integrity and availability of information; however, there are some subtle differences between them.

This Blog will cover only security related to software. So in terms of ISC2/CISSP which includes 10 security domains, this Group will maily focus on:
> Application and Systems Development Security
> Cryptography
Some portion of related domains like:[Just from a Software Architect prespective]
>Access Control Systems and Methodology
>Business Continuity Planning and Disaster Recovery Planning
>Security Management Practices
>Security Architecture and Models
>Law, Investigation, and Ethics

A related yahoo group is created to discuss the ideas as:
http://tech.groups.yahoo.com/group/SoftSecurity/