An approach to secure information systems engineering is developed consistent with today’s vulnerabilities, threats and risks. Grounding is established in the basic security technologies and strategies in use today. A concept of security engineering is constructed for whole elements of the critical infrastructure (e.g., utilities, government services, financial services, etc.) including legacy environments, the Internet, wireless and the coming evolution of “ubiquitous computing.”
