Paper: Addressing Software Security and Mitigations in the Life Cycle

Citation

• D. Gilliam, J. Powell, E. Haugh, and M. Bishop, “Addressing Software Security and Mitigations in the Life Cycle,” Proceedings of the 28th Annual NASA Goddard Software Engineering Workshop pp. 201–206 (Dec. 2003).

Paper

• PDF
• PS

Bibliographic Information

• DOI: 10.1109/SEW.2003.1270744
• BibTeX
• EndNote

Abstract

Traditionally, security is viewed as an organizational and information technology (IT) systems function comprising of firewalls, intrusion detection systems (IDS), system security settings and patches to the operating system (OS) and applications running on it. Until recently, little thought has been given to the importance of security as a formal approach in the software life cycle. The Jet Propulsion Laboratory has approached the problem through the development of an integrated formal software security assessment instrument (SSAI) with six foci for the software life cycle.

Copyright Notice

©2003 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.
This material is presented to ensure timely dissemination of scholarly and technical work. Copyright and all rights therein are retained by authors or by other copyright holders. All persons copying this information are expected to adhere to the terms and constraints invoked by each author’s copyright. In most cases, these works may not be reposted without the explicit permission of the copyright holder.
The definitive version was published in Proceedings of the 28th Annual NASA Goddard Software Engineering Workshop, Dec. 2003.