General security engineering

[mmcgrana]

General paper- or book-length resources on security engineering practices.

[jacobian]

👍 to Threat Modeling (#39); it's the best single book on this topic I've read so far. The other work you might want to consider is The Tangled Web, though that one is (as the name implies) very Web-specific, and more generally applicable.