Software security means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification or destruction.
The terms information security, computer security and information assurance are frequently incorrectly used interchangeably. These fields are interrelated often and share the common goals of protecting the confidentiality, integrity and availability of information; however, there are some subtle differences between them.
This Group will cover only security related to software. So in terms of ISC2/CISSP which includes 10 security domains, this Group will maily focus on:
> Application and Systems Development Security
> Cryptography
Some portion of related domains like:[Just from a Software Architect prespective]
>Access Control Systems and Methodology
>Business Continuity Planning and Disaster Recovery Planning
>Security Management Practices
>Security Architecture and Models
>Law, Investigation, and Ethics