Deriving Software Security Measures from Information Security Standards of Practice
This white paper describes an approach for deriving measures of software security from well-established and commonly used standard practices for information security. This work was performed as part of the Software Engineering Institute’s Software Security Measurement and Analysis (SSMA) project. It is an initial demonstration of how SSMA-defined software security drivers can be used in concert with practices and standards to derive meaningful measures of software security.
Related Links
Risk-Based Measurement and Analysis: Application to Software Security
Integrated Measurement and Analysis Framework for Software Security
WHITE PAPER
*This library item is related to the following area(s) of work:
Security and SurvivabilitySoftware Engineering Institute
February 2012
Find Us Here
Share This Page
For more information
