The Trustworthy Computing Security Development Lifecycle

Lipner, S.·2005·20th Annual Computer Security Applications Conference
DOI 10.1109/csac.2004.41

Cited by (234)

Items 101–200 of 234

  1. Identifying Security Relevant Warnings from Static Code Analysis Tools through Code Tainting
    Dejan Baca · 2010 · International Conference on Availability, Reliability and Security (ARES)
  2. Securing Large Applications Against Command Injections
    Guy-Vincent Jourdan · 2007 · IEEE International Carnahan Conference on Security Technology (ICCST)
  3. Secure Web Application Development and Global Regulation
    William Bradley Glisson, L M Glisson, Ray Welland · 2007 · International Conference on Availability, Reliability and Security (ARES)
  4. A study of penetration testing tools and approaches
    Chiem Trieu Phong · 2014 · Tuwhera (Auckland University of Technology)
  5. Software Security: The Dangerous Afterthought
    Curtis Steward, Luay A. Wahsheh, Aftab Ahmad, Jonathan M. Graham, Cheryl V. Hinds, Aurelia T. Williams, Sandra J. DeLoatch · 2012 · International Conference on Information Technology: New Generations
  6. A Survey on the Effectiveness of the Secure Software Development Life Cycle Models
    Jing-Chiou Liou, Saniora R. Duclervil · 2020 · Springer eBooks
  7. BİLGİSAYAR SİSTEMLERİNE YAPILAN SALDIRILAR VE TÜRLERİ: BİR İNCELEME
    Gürol Canbek, Şeref Sağıroğlu · 2007 · DergiPark (Istanbul University)
  8. An Ontology for Secure Web Applications.
    Marianne Busch, Martin Wirsing · 2015 · International Journal of Software and Informatics
  9. Establishing a Security Champion in Agile Software Teams: A Systematic Literature Review
    Hege Aalvik, Anh Nguyen‐Duc, Daniela S. Cruzes, Monica Iovan · 2023 · Lecture notes in networks and systems
  10. A Survey on Secure Software Development Lifecycles
    José Fonseca, Marco Paulo Amorim Vieira · 2013 · IGI Global eBooks
  11. The Security Development Lifecycle in the Context of Accreditation Policies and Standards
    Ezhil Kalaimannan, Jatinder N.D. Gupta · 2017 · IEEE Security & Privacy
  12. Building More Secure Commercial Software: The Trustworthy Computing Security Development Lifecycle.
    Steven B. Lipner · 2005 · GI-Jahrestagung
  13. SLR: From Saltzer and Schroeder to 2021…47 Years of Research on the Development and Validation of Security API Recommendations
    Nikhil Patnaik, Andrew C. Dwyer, Joseph Hallett, Awais Rashid · 2022 · ACM Transactions on Software Engineering and Methodology
  14. A Survey on Secure Software Development Lifecycles
    José Fonseca, Marco Paulo Amorim Vieira · 2013 · IGI Global eBooks
  15. Integrating a Security Plug-in with the OpenUP/Basic Development Process
    Shanai Ardi, Nahid Shahmehri · 2008 · International Conference on Availability, Reliability and Security (ARES)
  16. Sociotechnical Trust: An Architectural Approach
    Amit K. Chopra, Elda Paja, Paolo Giorgini · 2011 · Lecture notes in computer science
  17. Threat analysis for hardware and software products using HazOP
    Burzin Daruwala, Salvador Mandujano, Narasimha Kumar V Mangipudi, H. Chi Wong · 2009
  18. Model of the Product Development Lifecycle.
    Sandia National Laboratories (SNL-NM), Albuquerque, NM (United States), Sunny He, USDOE, DHS NPPD, N.R. Roe, Evan Wood, Noël M. Nachtigal, Jovana Helms · 2015
  19. A Method and Case Study for Using Malware Analysis to Improve Security Requirements
    Nancy R. Mead, Jose Andre Morales, Gregory Paul Alice · 2015 · International Journal of Secure Software Engineering
  20. Resilience as a New Enforcement Model for IT Security Based on Usage Control
    Sven Wohlgemuth · 2014 · IEEE Security and Privacy Workshops (SPW)
  21. Hermes: A Targeted Fuzz Testing Framework
    Caleb Shortt, Jens H. Weber · 2015 · Communications in computer and information science
  22. Data Protection by Default in Identity-Related Applications
    Marit Hansen · 2013 · IFIP International Federation for Information Processing/IFIP
  23. Security in the Software Life Cycle
    Karen Mercedes Goertzel, Joe Jarzombek · 2006
  24. Agile Software Development
    Torstein Nicolaysen, Richard Sassoon, Maria B. Line, Martin Gilje Jaatun · 2012 · IGI Global eBooks
  25. Threat modeling in web applications
    S R Satapathy · 2014
  26. Proceedings of workshop on software security assurance tools, techniques, and metrics
    Paul E. Black, Michael J. Kass, Elizabeth N. Fong · 2006
  27. The Effect of Software Warranties on Cybersecurity
    Dirk van der Linden, Awais Rashid · 2019 · ACM SIGSOFT Software Engineering Notes
  28. Mitigating multi-threats optimally in proactive threat management
    Punam Bedi, Vandana Gandotra, Archana Singhal, Himanshi Narang, Sumit Kumar Sharma · 2013 · ACM SIGSOFT Software Engineering Notes
  29. OSDC
    Umme Hunny, Mohammad Zulkernine, Komminist Weldemariam · 2013 · ACM Symposium on Applied Computing
  30. A MODEL BASED SECURITY REQUIREMENTS ENGINEERING FRAMEWORK
    P. Salini, S. Kanmani · 2010
  31. An encyclopedic approach for realization of security activities with agile methodologies
    Sushil Kumar, Ashish Jolly · 2014 · International Conference on Cloud Computing, Data Science & Engineering (Confluence)
  32. A Survey on Formal Specification of Security Requirements
    Aditya Dev Mishra, Khurram Mustafa · 2021 · International Conference on Advances in Computing, Communication Control and Networking (ICAC3N)
  33. A Case Study of Introducing Security Risk Assessment in Requirements Engineering in a Large Organization
    Shanai Ardi, Kristian Sandahl, Mats Gustafsson · 2023 · SN Computer Science
  34. Root Causes of Insecure Internet of Things and Holistically Addressing Them
    Christopher A. White · 2020 · International Conference on Computational Science and Computational Intelligence (CSCI)
  35. PJCT: Penetration testing based JAVA code testing tool
    Shikha Jain, Rahul Johari, Arvinder Kaur · 2015 · International Conference on Computing, Communication and Automation
  36. Using malware analysis to improve security requirements on future systems
    N. R. Mead, Jose Andre Morales · 2014
  37. A Study on Framework for Developing Secure IoT Service
    Mi-Yeon Yoon, Jonghyun Baek · 2015 · Lecture notes in electrical engineering
  38. A Categorized Review on Software Security Testing
    Neha Mahendra, Suhel Ahmad · 2016 · International Journal of Computer Applications
  39. STAMP S&S: Layered Modeling for the Complexed System in the Society of AI/IoT
    Tomoko Kaneko, Nobukazu Yoshioka · 2020 · Learning and analytics in intelligent systems
  40. A Model and Implementation of a Security Plug-in for the Software Life Cycle
    Shanai Ardi · 2008 · DiVA (Linkoping University)
  41. Trustworthy services through attestation
    John Lyle · 2011 · Oxford University Research Archive (ORA) (University of Oxford)
  42. Design Dimensions for Software Certification: A Grounded Analysis
    Gabriel Ferreira, Christian Kästner, Joshua Sunshine, Sven Apel, William L. Scherlis · 2019 · arXiv (Cornell University)
  43. Software security in practice: knowledge and motivation
    Hala Assal, Srivathsan G. Morkonda, Muhammad Zaid Arif, Sonia Chiasson · 2025 · Journal of Cybersecurity
  44. Data Validation, Data Neutralization, Data Footprint: A Framework Against Injection Attacks
    Guy-Vincent Jourdan · 2009 · The Open Software Engineering Journal
  45. Proposition of secure service oriented product line
    Ines Achour, Lamia Labed Jilani, Henda Ben Ghézala · 2015 · International Conference on Information Systems and Economic Intelligence (SIIE)
  46. Vulnerability and Risk Analysis Methods and Application in Large Scale Development of Secure Systems
    Shanai Ardi · 2020 · Linköping studies in science and technology. Dissertations
  47. The cybersecurity entrepreneur
    Mark W. Hodgins · 2024 · The Review of Austrian Economics
  48. Multilevel Security Spiral (MSS) Model: NOVEL Approach
    Shams Tabrez Siddiqui, Hatem S. A. Hamatta, Mohammad Ubaidullah Bokhari · 2013
  49. Evidence-Based Trustworthiness of Internet-Based Services Through Controlled Software Development
    Francesco Di Cerbo, Nazila Gol Mohammadi, Sachar Paulus · 2015 · Communications in computer and information science
  50. Building Secure Systems: From Threats to Security Patterns
    Eduardo B. Fernández, Sergio Mujica · 2010 · International Conference of the Chilean Computer Science Society (SCCC)
  51. BP: Integrating Cyber Vulnerability Assessments Earlier into the Systems Development Lifecycle: A Methodology to Conduct Early-Cycle Cyber Vulnerability Assessments
    Sonja Glumich, Juanita Riley, E. Paul Ratazzi, Amanda Ozanam · 2018 · IEEE Cybersecurity Development (SecDev)
  52. Automated static code analysis : A tool for early vulnerability detection
    Dejan Baca · 2009 · KTH Publication Database DiVA (KTH Royal Institute of Technology)
  53. Modèles de Sécurité logicielle pour les plates-formes à composants de service (SOP)
    Pierre Parrend · 2008 · HAL
  54. Software Security Models for Service-Oriented Programming (SOP) Platforms
    Pierre Parrend · 2008 · HAL
  55. Hacia la Ingeniería de Software Seguro
    Marta Castellaro, Susana Cristina Romaniz, Pablo Andrés Pessolani · 2009 · El Servicio de Difusión de la Creación Intelectual (National University of La Plata)
  56. Consistency Management for Security Annotations for Continuous Verification
    Frederik Reiche, Thomas Weber, Simeon Becker, Sebastian Weber, Robert Heinrich, Erik Burger · 2024 · ACM/IEEE International Conference on Model Driven Engineering Languages and Systems (MODELS)
  57. The Effect of Software Warranties on Cybersecurity
    Dirk van der Linden, Awais Rashid · 2018 · ACM SIGSOFT Software Engineering Notes
  58. Cybersecurity investment optimization with risk: Insights for resource allocation
    Yueran Zhuo, Senay Solak · 2015 · International Conference on Industrial Engineering and Operations Management (IEOM)
  59. Secure programming workshop: how to keep our students from causing buffer overflows
    James Walden, Charles E. Frank, Laurie Werner · 2005 · Journal of computing sciences in colleges
  60. Securing large applications against command injections
    Guy-Vincent Jourdan · 2009 · IEEE Aerospace and Electronic Systems Magazine
  61. Integrating Risk Management in System Development Life Cycle
    M. F. Unuakhalu, M. Garikapati · 2014
  62. A Framework to Detect and Analyze Software Vulnerabilities -Development Phase Perspective-
    Alka Agrawal, Raees Ahmad Khan · 2009
  63. Motivating Security Engineering with Economics: A Utility Function Approach
    Chad Heitzenrater, Justin King-Lacroix, Andrew C. Simpson · 2016 · IEEE International Conference on Software Quality, Reliability and Security Companion (QRS-C)
  64. Secure Software Engineering: A Knowledge Modeling based Approach for Inferring Association between Source Code and Design Artifacts
    Chaman Wijesiriwardana, Ashanthi Abeyratne, Chamal Samarage, Buddika Dahanayake, Prasad Wimalaratne · 2020 · International Journal of Advanced Computer Science and Applications
  65. Form‐based security in mobile health data collection systems
    Marriette Katarahweire, Engineer Bainomugisha, Khalid Azim Mughal, John Ngubiri · 2021 · Security and Privacy
  66. Modeling the trust boundaries created by securable objects
    Matt Miller · 2008
  67. A Guidance Model for Architecting Secure Mobile Applications
    Widura Schwittek, André Diermann, Stefan Eicker · 2012 · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering
  68. Concurrent Software Testing : A Systematic Review and an Evaluation of Static Analysis Tools
    Md. Abdullah Al Mamun, Aklima Khanam · 2009 · Diva portal (Dalarna University Library)
  69. Secure ecommerce web application design principles, beyond PCI DSS
    Dave Hartley · 2009 · Computer Fraud & Security
  70. USIS: A Unified Framework for Secured Information System Lifecycle
    Bei-Tseng Bill Chu, Huiming Yu, Audrey Dance · 2006 · Advances in intelligent systems research/Advances in Intelligent Systems Research
  71. Proposta de uma metodologia de medição e priorização de segurança de acesso para aplicações WEB.
    Regina Maria Thienne Colombo · 2014
  72. INSECURITY IN SECURITY SOFTWARE
    Maik Morgenstern, Andreas Marx, Mary Landesman · 2005
  73. Identity and Access Management in Multi-tier Cloud Infrastructure
    Mohammad Faraji · 2013 · TSpace (University of Toronto)
  74. Don't forget your classics: Systematizing 45 years of Ancestry for Security API Usability Recommendations
    Nikhil Patnaik, Andrew C. Dwyer, Joseph Hallett, Awais Rashid · 2021 · arXiv (Cornell University)
  75. Building India as the Destination for Secure Software Development – Next Wave of Opportunities for the ICT Industry
    Prem Chand · 2005 · Lecture notes in computer science
  76. Formalization of Secure Service Oriented Product Line
    Ines Achour, Lamia Labed Jilani, Henda Ben Ghézala · 2015 · International Conference on Software Engineering and Applications (ICSOFT-EA)
  77. The Complexity of Cyber Security in Private and Professional Everyday Life — An Ethnographic-Informatic Collaborative Approach
    Henrich C. Pöhls, Dennis Eckhardt, Nelli Feist, Sabine Pfeiffer, Dominik Herrmann, Stefan Katzenbeisser · 2025 · Lecture notes in computer science
  78. MASPTA-O: Multiagent System Planning to Avoid Threats Optimally
    Vandana Gandotra, Archana Singhal, Punam Bedi · 2011 · Information Security Journal A Global Perspective
  79. A Case Study of Adopting Security Guidelines in Undergraduate Software Engineering Education
    Yen-Hung Frank Hu, Charles Scott · 2014 · Journal of Computer and Communications
  80. Integrating vulnerability risk into the software process
    Onyeka Ezenwoye, Yi Liu · 2022 · ACM Southeast Regional Conference (ACMSE)
  81. Error detection in binary code with dynamic symbolic execution
    Alexey Vishnyakov, Eli Kobrin, Andrey Fedotov · 2022 · Proceedings of the Institute for System Programming of RAS
  82. Success Factors in Secure Software Development of Cloud Applications in Germany: A Qualitative-explorative Expert Study
    Marc Schubert, Sven Pagel, Harald F. O. von Korflesch · 2023 · Hawaii International Conference on System Sciences (HICSS)
  83. The Impact of Personal Psychology and Behavior Factors on the Innovation Assimilation of Secure System Development
    Songming Qiu, Wang Penghua, Peng Yang · 2015 · American Journal of Industrial and Business Management
  84. Using a case study to teach students about finding and fixing logic flaws in software
    Lindsay Simpkins, Xiaohong Yuan, Huiming Yu, Kenneth Williams · 2015 · IEEE Frontiers in Education Conference (FIE)
  85. Refactoring of Security Antipatterns in Distributed Java Components
    Marc Schönefeld · 2006 · Technische Universität Dortmund Eldorado (Technische Universität Dortmund)
  86. Security-Oriented Design for Web-Based Systems: A Critical Review
    Marriette Katarahweire, Joseph Kibombo Balikuddembe · 2012 · African Conference for Software Engineering and Applied Computing (ACSEAC)
  87. Metodologías para desarrollar software seguro
    Universidad Autónoma de Zacatecas, México, Carlos Joaquín Brito Abundis · 2013 · RECIBE REVISTA ELECTRÓNICA DE COMPUTACIÓN INFORMÁTICA BIOMÉDICA Y ELECTRÓNICA
  88. Threat Extraction Method Based on UML Software Description
    Masoumeh Zeinali, Mohammad Ali Hadavi · 2018 · International ISC Conference on Information Security and Cryptology (ISCISC)
  89. Against Mindset
    Arne Padmos · 2018 · New Security Paradigms Workshop
  90. Difficult on Addressing Security: A Security Requirement Framework
    Nikhat Parveen, Mazhar Khaliq · 2021 · Advances in intelligent systems and computing
  91. Validating Security Requirement Specifications through the use of a Knowledge Graph
    Lynn Vonderhaar, Sarah Reynolds, Tyler Procko, Omar Ochoa · 2023 · IEEE International Conference on Semantic Computing (ICSC)
  92. Model-based development of security requirements
    Eduardo B. Fernández, Sergio Mujica · 2011 · CLEI electronic journal
  93. Building Assured Systems Framework
    Nancy R. Mead, Julia Allen · 2010
  94. Modelagem de ameaças antiforenses aplicada ao processo forense digital
    Marcelo Brito Maués · 2016
  95. Comparison of i*-based and Use Case-based Security Modelling Initiatives for Software Requirements Engineering: An empirical comparison of Secure Tropos and Misuse Cases
    Yushan Pan · 2012 · NORA - Norwegian Open Research Archives
  96. Finding Security Patterns to Countermeasure Software Vulnerabilities
    Ole Gunnar Borstad · 2008 · NORA - Norwegian Open Research Archives
  97. Security Testing for Web Applications in SDLC
    Rondla Srilatha, Gande Someshwar · 2013 · Diva portal (Dalarna University Library)
  98. Vulnerability of Code
    Petra Barzin · 2007 · Datenschutz und Datensicherheit - DuD
  99. Designing security into software
    Chang Tony Zhang · 2006 · DSpace@MIT (Massachusetts Institute of Technology)
  100. Secure Systems Development and Secure Coding
    Paul Hopkins · 2014 · Engineering & Technology Reference