Dr. Bhavani Thuraisingham The University of Texas at Dallas August 6, 2007 Software Engineering Systems Engineering Security Engineering

2 5/8/ :03 Software Engineering, Systems Engineering, Security Engineering 0 Software Engineering (SE) is the discipline of designing, creating, and maintaining software by applying technologies and practices from computer science, project management, engineering and other fields Systems Engineering (SE) is an interdisciplinary approach and means for enabling the realization and deployment of successful systems. It can be viewed as the application of engineering techniques to the engineering of systems, as well as the application of a systems approach to engineering efforts - 0 Security engineering is about building systems to remain dependable in the face of malice, error or mischance. As a discipline, it focuses on the tools, processes and methods needed to design, implement and test complete systems, and to adapt existing systems as their environment evolves. -

3 5/8/ :03 Software Engineering, Systems Engineering, Security Engineering 0 System engineering encompasses both software engineering and security engineering 0 To develop systems we need good software engineering methods; we also need good security engineering techniques 0 Goal is built systems that are dependable and evolvable 0 Dependability includes security, privacy, fault tolerant, time critical, trust and integrity 0 Software engineering, systems engineering and security engineering should be intertwined

4 5/8/ :03 End-End Systems Development 0 Component-based systems 0 Integration of large scale components -Examples include Middleware, Data Manager, Applications 0 Flexible systems to satisfy policies 0 Formal methods as well as various testing methods to ensure that the interfaces meet the specifications

5 5/8/ :03 How should education proceed? 0 Much of the academic education has focused on software engineering 0 We have produced software engineering who do not perhaps fully understand many of the complexities involved in designing large scale systems -Example of such a system is AWACS (Airborne Warning and Control System – my experience at MITRE in the mid 1990s) 0 The systems have to be dependable -For example they have to be secure and have to meet timing constrains – conflicting goals -Security engineering has to be a integral part of software engineering 0 Students should understand the fundamentals as well as the engineering of complex systems

6 5/8/ :03 How should education proceed? 0 Difficult to have a sound and complete education in system engineering without the active participation of industry working on systems acquisition and academia -System engineering corporations include large defense contractors such as Raytheon, Lockheed and Boeing 0 Must integrate theory with industry internships 0 Five year curriculum where students spend 1 year in the industry – either 3 rd or 4 th year

7 5/8/ :03 How should education proceed? 0 Year 1: Basic courses and prerequisites 0 Year 2: Strong foundation in Software engineering 0 Year 3: Courses in security, Systems engineering, End-to-End systems development and integration 0 Year 4: Industry experience 0 Year 5: Students build prototype systems combined with a study of the fundamentals

8 5/8/ :03 Instructors? 0 Combination of Academia, Industry and Government/Domain experts; they have to work closely together 0 Academics instructors will focus on the basics such as security, software engineering and also teach the application of formal methods to ensure that the systems are secure or meet the specifications 0 Government./Domain expert instructors will discuss requirements, acquisition process, their needs 0 Industry Experts will discuss what is involved in systems engineering, what will be expected of the student

9 5/8/ :03 Some Directions 0 Multiple universities could work together and offer joint programs taking advantage of the strengths of each – do not reinvent the wheel 0 E.g., University of Texas at Dallas has a strong program in Software Engineering, University of Virginia has a strong program in Systems Engineering, University of Cambridge is strong in Security Engineering 0 The three schools could put their resources together and offer joint national/international programs 0 Program has to be fairly comprehensive and cover all the manor aspects 0 Start with a MS program before expanding to a 5 year undergrad program -Possibly offer a 5 year BS/MS program

10 5/8/ :03 Directions 0 We need to start right away 0 Have FOCUSED conferences/workshops -Government/industry/academia workshop 0 Need to determine the role of standards 0 Pilot programs 0 IEEE, ACM participation 0 Curriculum development