SPREN1
Sicherheit in der Produkteentwicklung 1
Cyber security in product development. Learn and apply secure software development as part of secure product development in the context of case studies. Acquire basic knowledge to perform threat and vulnerability analyses and to consult product developers.
About this sector
Security in product development. Information security protects a company's own IT. Product security protects what the company sells: a medical analyser, a car, a smart lock, a firewall appliance. That product ships to customers, runs for ten or twenty years and cannot be patched as easily as an office laptop. The module follows the product cybersecurity lifecycle. On the development side it runs from classifying the product and its target markets through requirements, threat modelling, architecture, sourcing, implementation, testing, documentation, certification and DevSecOps. On the post-launch side come patching, vulnerability management, monitoring and incident handling. Regulations such as the EU Cyber Resilience Act and standards such as IEC 62443 and ISO/SAE 21434 decide how much of that is mandatory. Case studies in groups apply it to a real product.