Title :
Evaluation of Security Lifecycle for the Quantitative Analysis
Author :
Jip, Kim Young ; Lee, Eun-Ser
Author_Institution :
Soong-Sil Univ. Comput. Inst., Seoul
Abstract :
This paper is intended to evaluate security lifecycle and efficiency in ISO/IEC 15408, common criteria. There are many risk items that cause the security requirement problems during software development. This paper evaluates the efficiency of security lifecycle that detection of new risk items and remove ratio at the security requirement lifecycle. For the similar domain projects, we can remove security risk items and manage to progress them by using security lifecycle, which can greatly improve the software process.
Keywords :
IEC standards; ISO standards; formal specification; program diagnostics; program testing; risk analysis; safety-critical software; security of data; software process improvement; software standards; IEC 15408; ISO 15408; risk item detection; security requirement lifecycle; software development; software process improvement; Computer hacking; Computer security; Data security; IEC standards; ISO standards; Information security; National security; Risk management; Testing; Uniform resource locators; Analysis; Security Lifecycle;
Conference_Titel :
Convergence and Hybrid Information Technology, 2008. ICHIT '08. International Conference on
Conference_Location :
Daejeon
Print_ISBN :
978-0-7695-3328-5
DOI :
10.1109/ICHIT.2008.212