As the use of the Internet and networked systems become more pervasive, the importance of developing secure software increases. The purpose of this technical note is to present overview information about existing processes, standards, life cycle models, frameworks, and methodologies that support or could support secure software development. Where applicable and possible, some evaluation or judgment is provided.
The target audience for this technical note includes software engineering process group (SEPG) members, software developers, and managers seeking information about existing software development life cycle (SDLC) processes that address security.
This report is related to the following area(s) of work:
Process ImprovementTechnical Note
CMU/SEI-2005-TN-024
December 2005
SEI:
Davis, Noopur; Secure Software Development Life Cycle Processes: A Technology Scouting Report (CMU/SEI-2005-TN-024). Software Engineering Institute, Carnegie Mellon University, 2005. http://www.sei.cmu.edu/library/abstracts/reports/05tn024.cfm
IEEE:
N. Davis, "Secure Software Development Life Cycle Processes: A Technology Scouting Report," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2005-TN-024, 2005. http://www.sei.cmu.edu/library/abstracts/reports/05tn024.cfm
APA:
Davis, N., (2005). Secure Software Development Life Cycle Processes: A Technology Scouting Report (CMU/SEI-2005-TN-024). Retrieved May 24, 2013, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/05tn024.cfm
CHI:
Davis, Noopur, Secure Software Development Life Cycle Processes: A Technology Scouting Report (CMU/SEI-2005-TN-024). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2005. http://www.sei.cmu.edu/library/abstracts/reports/05tn024.cfm
MLA:
Davis, N., 2005. Secure Software Development Life Cycle Processes: A Technology Scouting Report (Technical Report CMU/SEI-2005-TN-024). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/05tn024.cfm
For more information