Adopting a Software Security Improvement Program

  • Authors:
  • Dan Taylor;Gary McGraw

  • Affiliations:
  • Cigital;Cigital

  • Venue:
  • IEEE Security and Privacy
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

Adopting software security in a large organization is a challenge that takes careful planning. Cultural change of any kind is difficult in big companies, and the potential minefields surrounding software process, development tools, programming language, platform, and other technical decisions only exacerbate the problem. Regardless of these issues, leading software shops (including Microsoft) are working hard to improve the way they build security into their products.