Research on Software Development Process Assurance Models in ICT Supply Chain Risk Management

Author

Feng Xie ; Tianbo Lu ; Bing Xu ; Dongqing Chen ; Yong Peng

Author_Institution

Security Evaluation Center, China Inf. Technol., Beijing, China

fYear

2012

fDate

6-8 Dec. 2012

Firstpage

43

Lastpage

49

Abstract

Software assurance in software development process becomes an important part of ICT supply chains risk management, and also has been one of the most advanced information security technologies. Based on the researches of software assurance, this paper studies the development and current research of software security assurance in the background of software security being concerned by more and more people, then proposes a software security assurance model in software development process based on SDLC model, summarizes security activities during the development phase, analyzes the risk management of software assurance. Finally, the paper also indicates new research directions.

Keywords

production engineering computing; risk management; security of data; software engineering; supply chain management; ICT supply chain risk management; SDLC model; information and communication technology; information security technology; process assurance model; software assurance; software development; software development life cycle model; Organizations; Process control; Risk management; Security; Software; Supply chains; Testing; ICT supply chain risk management; security; software assurance; software development process;

fLanguage

English

Publisher

ieee

Conference_Titel

Services Computing Conference (APSCC), 2012 IEEE Asia-Pacific

Conference_Location

Guilin

Print_ISBN

978-1-4673-4825-6

Type

conf

DOI

10.1109/APSCC.2012.41

Filename

6478197