Estimating the Cost of Security for COTS Software

Authors:
Donald J. Reifer;Barry W. Boehm;Murali Gangadharan
Affiliations:
-;-;-
Venue:
ICCBSS '03 Proceedings of the Second International Conference on COTS-Based Software Systems
Year:
2003

Citing 3
Cited 1

The CERT guide to system and network security practices

The CERT guide to system and network security practices
Software Cost Estimation with Cocomo II with Cdrom

Software Cost Estimation with Cocomo II with Cdrom
A Map of Security Risks Associated with Using COTS

Computer

Using iDAVE to determine availability requirements

3-WoSQ Proceedings of the third workshop on Software quality

Quantified Score

Hi-index	0.01

Visualization

Abstract

This paper describes enhancements being made to the University of Southern California's COnstructive COTS (COCOTS) integration cost model to address security concerns. The paper starts by summarizing the actions we have taken to enhance COCOMO II to model the impact of security on development effort and duration. It then relates the COCOMO II approach to the COCOTS estimating framework so that the enhancements proposed can be incorporated into the COCOTS model. After summarizing the team's progress in developing counterpart COCOTS security cost drivers and expert-consensus cost driver parameter values, the paper points to the steps that will be taken to validate the findings and calibrate the model.