The ISDF Framework: Towards Secure Software Development

키워드

참고문헌 (44)

1. J. Viega, "Building Secure Software" (2002), Addison -Wesley
2. M.Howard, "Building more secure software with improved development process", IEEE Security & Privacy, 2(6), pp.63~65 (2004)
3. N. Davis, "Processes for producing secure software", IEEE Security & Privacy, 2(3), pp.18~25 (2004)
4. J. K. R, "Software engineering for secure software - state of the art: A survey", tech. rep., Purdue University, ~ (2005)
5. A. Alkussayer, "Towards secure software development: Integrating security patterns into a secure SDLC", The 47th ACM Southeast Conference (2009)
6. A. Alkussayer, "The ISDF framework: Integrating security patterns and best practic-es", The 3rd International Conference on Information Security and Assurance (2009)
7. M. Howard, "The Security Development Lifecycle SDL: A Process for Developing Demonstrably More Secure Software", Microsoft Press (2006)
8. G. McGraw, "Software Security: Building Security In" (2006), Addison-Wesley
9. M. Howard, "Inside the windows security push", IEEE Security & Privacy, 1(1), pp.57~61 (2003)
10. "Comprehensive, lightweight application security process"[URL]
11. G.McGraw, "Software security", IEEE Security & Privacy, 2(2), pp.80~83 (2004)
12. "Fundamental practices for secure software development: A guide to the most effective secure development practices in use today"[URL]
13. M. Schumacher, "Security Patterns: Integrating Security and Systems Engineering" (2006), John Wiley & Sons
14. C. Alexander, "A Pattern Language: Towns- Buildings- Construction" (1977), Oxford University Press
15. E. Gamma, "Design Patterns: Elements of Reusable Object-Oriented Software" (1995), Addison- Wesley Professional
16. J. Yoder, "Architecural patterns for enabling application security", PLoP97 Conference (1997)
17. T. Heyman, "An analysis of the security patterns land-scape", 3rd International workshop on Software Engineering for Secure Systems (2007)
18. G. H. G. McGraw, "Exploiting Software: How to Break Code" (2004), Addison-Wesley
19. T. G. D. Graham, "Software Inspection" (1993), Addison-Wesley
20. M. Howard, "Writing Secure Code" (2003), Microsoft Press
21. B. Potter, "Software security testing", Software Development, 2(5), pp.81~85 (2005)
22. B. Chess, "Static analysis for security", Software Development, 2(6), pp.76~79 (2004)
23. J. Gregoire, "On the secure software development process: CLASP and SDL compared", Third International Workshop on Software Engineering for Secure Systems (2007)
24. C. Steel, "Core Security Patterns: Best Practices and Strategies forJ2EE, Web Services, and Identity Management" (2005), Prentice Hall Ptr
25. E. B. Fernandez, "A pattern language for security models", PLoP 2001Conference (2001)
26. D. Hatebur, "Security engineering using problem frames", International Conference on Emerging Trends in Information and Communication Security (2006)
27. M. A. Jackson, "Problem Frames: Analysing and Structuring Software Development Problems" (2001), Addison-Wesley
28. V. Horvath, "From security patterns to implementation using petri nets", Interna-tional Conference on Software Engineering (2008)
29. K. Supaporn, "An approach: Constructing the grammar from security patterns", the 4th International Joint Conference on Computer Science and Software Engineering (2007)
30. K. Yskout, "An inventory of security patterns", tech. rep., Katholieke University Leuven, Department of Computer Science (2006)
31. M. Ha_z, "Organizing security patterns", IEEE Software, 24(4), pp.52~60 (2007)
32. B. Blakley, "Security design patterns", tech. rep., Open Group (2004)
33. N. Yoshioka, "A survey on security patterns", Progress In Infor-matics, (5), pp.35~47 (2008)
34. M. Andrews, "How to Break Web Software" (2006), Addison-Wesley
35. A. Aprville, "Secure software development by example", IEEE Security & Privacy, 3(4), pp.10~17 (2005)
36. J. Jurjens, "Secure System Development with UML" (2004), Springer
37. I.Valenzuela, "Integration ISO17799 into your software development lifecycle", (In)Secure, 11, pp.29~36 (2007)
38. E. B. Fernandez, "A methodology for secure software design" (2004), International Conference on Soft-ware Engineering Research and Practice
39. E. B. Fernandez, "Using security patterns to build secure systems", 1st International Workshop on Software Patterns and Quality (2007)
40. C. Haley, "A framework for security requirements engineer-ing", SESS'06 (2006)
41. G. Sindre, "Eliciting security requirements with misuse cases", Requirements Engi-neering, 10(1), pp.34~44 (2005)
42. C. Haley, "The effect of trust assumptions on the elaboration of security requirements", Proceedings of the Requirements Engineering Conference, 12th IEEE International (2004)
43. Security quality requirements engineering (SQUARE) metho-dology, "N. Mead", tech. rep, ~, pp.CMU (2005), SEI-2005-TR-009
44. C. Haley, "Security requirements engineering: A framework for representation and analysis", IEEE Transactions on Software Engineering, 34(1), pp.133~153 (2008)

관련 논문AI추천