Review on Common Criteria as a Secure Software Development Model
Mehmet Kara · International Journal of Computer Science and Information Technology · 2012
Standards, models, frameworks and guidelines have been developed for secure software development such as such as Common Criteria, SSE-CMM, Microsoft SDL, OpenSAMM.Current standards and models provide guidance for particular areas such as threat modelling, risk management, secure coding, security testing, verification, patch management, configuration management etc.But there is not a generally accepted model for a secure software development lifecycle.Common Criteria provides objective evaluation methodology to validate that a product satisfies a specified set of security requirements.In this paper Common Criteria secure software development approach is examined and compared with other well known standards and models.