On the secure software development process: CLASP and SDL compared

Proceedings - ICSE 2007 Workshops: Third International Workshop on Software Engineering for Secure Systems, SESS'07

Volumn , Issue , 2007, Pages

  Grégoire, Johan ^a   Buyens, Koen ^a   De Win, Bart ^a   Scandariato, Riccardo ^a   Joosen, Wouter ^a  

^a UNIVERSITY OF LEUVEN   (Belgium)

Author keywords

[No Author keywords available]

Indexed keywords

SECURITY OF DATA; SECURITY SYSTEMS;

SOFTWARE CONSTRUCTION;

SOFTWARE ENGINEERING;

EID: 38549162276     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SESS.2007.7     Document Type: Conference Paper

References (17)

1. Secure sofware. http://www.securesoftware.com/, 2006.
2. Systems security engineering capability maturity model (SSE-CMM), 2006. Standard ISO/IEC 21827.
3. Build security in, 2007. https://buildsecurityin.us-cert.gov/.
4. K. Beck. Extreme Programming Explained. Addison-Wesley, Oct. 1999.
5. T. Davenport. Process Innovation: Reengineering Work Through Information Technology. Harvard Business School Press, Boston, 1993.
6. A. Hall and R. Chapman. Correctness by construction: Developing a commercial secure system. IEEE Software, 19(1): 18-25, 2002.
7. M. Howard and D. E. Leblanc. Writing Secure Code. Microsoft Press, Redmond, WA, USA, 2002.
8. M. Howard and S. Lipner. The Security Development Life-cycle: SDL: A Process for Developing Demonstrably More Secure Software. Microsoft Press, 2006.
9. I. Jacobson, G. Booch, and J. Rumbaugh. The Unified Software Development Process. Addison-Wesley, Feb. 1999.
10. A. Jaquith. Security Metrics: Replacing Fear, Uncertainty, and Doubt. Addison-Wesley Professional, 2007.
11. G. McGraw. Software Security: Building Security In. Addison Wesley, 2006.
12. OWASP. Comprehensive, lightweight application security process, http://www.owasp.org, 2006.
13. G. Peterson. Collaboration in a secure development process. http://www.arctecgroup.net/articles.htm, Jun 2004.
14. J. H. Saltzer and M. D. Schroeder. The protection of information in computer systems. Proceedings of the IEEE, 63(9): 1278-1308, Sept. 1975.
15. G. Stoneburner, C. Hayden, and A. Feringa. Engineering principles for information technology security. NIST Special Publication 800-27, Revision A, June 2004.
16. J. Viega and G. McGraw. Building Secure Software: How to Avoid Security Problems the Right Way. Addison-Wesley, 2002.
17. D. Wheeler. Secure programming for linux and unix howto. citeseer.ist.psu.edu/wheeler00secure.html.