Jahziah.
العربية

STUDY GUIDE · GKU 8

Software quality study guide (Software Engineering)

Quality is built into software by people, processes and measurement, and security is one of the qualities that matters most. The first part covers what quality means and how it is specified, what poor quality costs and how it is measured, and the quality assurance process — plans, audits, ISO 9001, CMMI, improvement cycles and the basic quality tools. The second part covers information security (confidentiality, integrity, availability, access control and cryptography), cybersecurity threats and network defences, secure development and defensive programming against the OWASP Top 10, and the safety techniques used when software can hurt people.

Continue in the app

Structured by the official ETEC subject standard for this topic: every listed topic and learning outcome, with formulas, figures and worked examples. The full sections are available to members in the app.

SKU 8.1 · Software, process and product quality assurance

  1. Software quality: culture, models and quality requirements

    What "quality" means for software, the engineering culture and ethics that sustain it, the McCall and ISO/IEC 25010 quality models, and how to write quality requirements that can be measured.

  2. Quality management: cost of quality and quality metrics

    The prevention-appraisal-failure model of the cost of quality, how to choose quality metrics with Goal-Question-Metric, and the Six Sigma measures DPMO and sigma level.

  3. The SQA process: plans, ISO 9001, CMMI, improvement and tools

    How software quality assurance differs from quality control, what an SQA plan and its activities contain, the ISO 9001 and CMMI frameworks, the improvement cycles, and the seven basic quality tools with a Pareto analysis.

SKU 8.2 · Fundamentals of software security

  1. Information security: CIA, access control and cryptography

    The goals of information security, how operating systems enforce access control and least privilege, and how symmetric and public-key cryptography, hashes and signatures protect data — with key counts, brute-force time and a worked RSA example.

  2. Cybersecurity: threats and network defences

    The main kinds of malware and network attack, the defences built from network security principles — firewalls, a DMZ, intrusion detection, VPNs and TLS — and how each threat reaches the software it targets.

  3. Secure software development and defensive programming

    Security built into every life-cycle activity: secure design principles, threat modelling with STRIDE, the OWASP Top 10 (2021 edition), and the defensive-programming habits — input validation, parameterised queries, safe failure — that stop the commonest attacks.

  4. Software safety engineering: hazards, FMEA and fault trees

    How safety differs from security and reliability, how hazards are found and ranked with FMEA, how a fault tree computes the probability of an accident, and the design techniques — interlocks, independent checks, fail-safe states — that keep software from hurting people.

MORE SOFTWARE ENGINEERING GUIDES

All study guides

Read the full guide beside your practice questions.

Open the app