Cyber Security Engineering: A Practical Approach for Systems and Software Assurance

Chapter 3. Secure Software Development Management and Organizational Models¹

1. Many of the models presented in this chapter were initially discussed in Mead [2010b].

with Julia Allen and Dan Shoemaker

In This Chapter

• 3.1 The Management Dilemma

• 3.2 Process Models for Software Development and Acquisition

• 3.3 Software Security Frameworks, Models, and Roadmaps

• 3.4 Summary

3.1 The Management Dilemma

When managers and stakeholders start a software acquisition or development project, they face a dazzling array of models and frameworks to choose from. Some of those models are general software process models, and others are specific to security or software assurance. Very often the marketing hype that accompanies these models makes it difficult ...