Towards a structured unified process for software security

Proceedings - International Conference on Software Engineering

Volumn 2006-May, Issue , 2006, Pages 3-9

  Ardi, Shanai ^a   Byers, David ^a   Shahmehri, Nahid ^a  

^a LINKÖPING UNIVERSITY   (Sweden)

Author keywords

Software development process; Software security; Vulnerability analysis

Indexed keywords

ENCODING (SYMBOLS); SOFTWARE ENGINEERING; SOFTWARE TESTING;

PENETRATION TESTING; SECURITY ACTIVITIES; SOFTWARE DEVELOPMENT PROCESS; SOFTWARE LIFE CYCLES; SOFTWARE SECURITY; SOFTWARE VULNERABILITIES; STRUCTURED APPROACH; VULNERABILITY ANALYSIS;

SOFTWARE DESIGN;

EID: 84910598342     PISSN: 02705257     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1137627.1137630     Document Type: Conference Paper

References (17)

1. K. Beck. Embracing change with extreme programming. IEEE Computer, 32(10):70-77, 1999.
2. K. Beck. Extreme Programming Explained: Embrace Change. Addison-Wesley, 1999.
3. G. Hoglund and G. McGraw. Exploiting Software: How to Break Code. Addison-Wesley, 2004.
4. M. Howard. Building more secure software with improved development processes. Security & Privacy Magazine, 2(6):63-65, Nov-Dec 2004.
5. M. Howard and D. LeBlanc. Writing Secure Code. Microsoft Press, 2003.
6. I. Jacobson, G. Booch, and J. Rumbaugh. Unified Software Development Process. Addison-Wesley, 1999.
7. J. Koziol, D. Litchfield, D. Aitel, C. Anley, S. Eren, N. Mehta, and R. Hassel. The Shellcoder's Handbook: Discovering and Exploiting Security Holes. Wiley, 2004.
8. C. Landwehr, A. Bull, J. McDermott, and W. Choi. A taxonomy of computer program security flaws, with examples. ACM Computing Surveys, 26(3):211-255, 1994.
9. W. S. Lee, D. L. Grosh, F. A. Tillman, and C. H. Lie. Fault tree analysis, methods and applications-a review. IEEE Transactions on Reliability, R-34, August 1985.
10. R. C. Linger. Cleanroom process model. IEEE Software, 11(2):50-56, March 1994.
11. S. B. Lipner. The trustworthy computing security development lifecycle. In Proceedings of the 20th Annual Computer Security Applications Conference, pages 2-13. IEEE Computer Society, December 2004.
12. G. McGraw. Software security. Security & Privacy Magazine, 2(2):80-83, Mar-Apr 2004.
13. S. R. Palmer and J. M. Felsing. A Practical Guide to Feature-Driven Development. Prentice-Hall, 2002.
14. S. T. Redwine and N. Davis. Task force for improving security across the development lifecycle task force report, Appendix B: Processes to produce secure software, 2004.
15. SSE-CMM website. http://www.sse-cmm.org/(accessed June 2005).
16. J. Viega. The CLASP application security process, 2005. http://www.securesoftware.com/(accessed June 2005).
17. J. Viega and G. McGraw. Building Secure Software. Addison-Wesley, 2002.