Considering Operational Security Risk during System Development
Carol Woody, Christopher Alberts · IEEE Security & Privacy · 2007
The operational security of software-intensive systems is closely linked to the practices and techniques used during system design and development. The authors examine OCTAVE, an operational security-risk methodology, and apply it to the security-related risks identifiable while developing software-intensive systems.