Secure Design and Development Cybersecurity Capability Maturity Model (SD2-C2M2)
Sri Nikhil Gupta Gourisetti, Scott Mix, Michael Mylrea, Christopher A. Bonebrake, Md Touhiduzzaman · 2019
The Secure Design and Development Cybersecurity Capability Maturity Model (SD2-C2M2) provides a browser-based tool that allows hardware and software developers to assess the maturity level of their design and development processes, allows management to determine desired maturity levels in seven domains, and allows developers to monitor process maturity improvements against management goals. The tool can be used by commercial developers as well as internal development organizations. This paper provides an overview of the tool and domains and presents a hypothetical case study of the tool to reduce software buffer overflow attack vulnerabilities by improving the software development process.