An Approach for Secure Software Development Lifecycle Based on ISO/IEC 27034

In the process of software secure development it is observed that security issues are discussed more generally and the confidential level of organizations, the characteristic of each organization in the terms of the principles of the organization and the security framework of the software are not considered more in these models. This article refer to two important principle in terms of the understanding and recognition of the place of the security of software applications of each organization based on the ISO indicators27034 by concentration on the design phase and it is said that secure application should be defined based on the organizations’ normative framework and the software normative framework, the targeted level of the different software security related to the field of the business and the level of importance of information get clear on that realm. This article makes it clear in addition to those software developers for common principles of software security that should be continuously controlled in each phase; they should refer to the organizations’ security framework to implement during process.

کلیدواژه ها:

Software Security ، Software Secure Development ، Vulnerability ، Principled Security Framework