Data Protection and Security

VI

Operating System Security and Secure Programming

VI.IV

Secure Software Development

Secure Lifecycle:

Remember from your software engineering classes how important it is to adopt a high-quality software engineering methodology (software lifecycle model) for having a high quality software system. Secure Lifecycle can be simply defined as the lifecycle model in which security concerns are inserted at each step. An example of a secure lifecycle is seen in the following figure.

We will briefly explain the first step (security requirements and analysis phase) in a typical secure lifecycle as follows. Information on other phases can be found in the following reference.

Reference: Axelle Apvrille and Makan Pourzandi, Secure Software Development by Example, IEEE Security & Privacy Magazine, July/August 2005 (Vol.3 No.4), page 10-17.