Information technology security evaluation using CERT c secure coding standard

  • Authors:

  • Taeseung Lee;Kwangwoo Lee;Dongho Won;Namje Park

  • Affiliations:

  • Information Security Group, School of Information and Communication Engineering, Sungkyunkwan University, Suwon, Gyeonggi-do, Korea;Information Security Group, School of Information and Communication Engineering, Sungkyunkwan University, Suwon, Gyeonggi-do, Korea;Information Security Group, School of Information and Communication Engineering, Sungkyunkwan University, Suwon, Gyeonggi-do, Korea;Department of Computer Education Teachers College, Jeju National University, Korea

  • Venue:
  • FGIT'11 Proceedings of the Third international conference on Future Generation Information Technology
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

IT products developed without due consideration of security issues have caused many security accidents over the last ten years. As a result, the importance of security in software development is increasing. It is important to ensure that no known vulnerabilities remain in the design, development, and test stage, in order to develop secure IT products. Even when an IT product is designed securely, various security vulnerabilities can occur, such as buffer overflow, if the general coding technique is used at the development stage. Therefore, the introduction of secure coding rules becomes most critical in developing a robust information security product. This paper proposes a method of applying a secure coding standard in the CC evaluation process. The proposed method is expected to contribute to improving the security of IT products in the CC evaluation process.