Security Assurance.

The article discusses security assurance in computer programming as the author cites his experience developing such systems and how they meet customers' needs. He covers his work on software developer Microsoft's Security Development Lifecycle (SDL). In order to achieve practical assurance, the auth...

Full description

Bibliographic Details
Published in:Communications of the ACM Vol. 58; no. 11; pp. 24 - 27
Main Author: Lipner, Steven B.
Format: Article
Published: Association for Computing Machinery Nov2015
Subjects:
Online Access:View this record in EBSCOhost
Description
Summary:The article discusses security assurance in computer programming as the author cites his experience developing such systems and how they meet customers' needs. He covers his work on software developer Microsoft's Security Development Lifecycle (SDL). In order to achieve practical assurance, the author suggests using continuous improvement practices, addressing the impact on delivered code, and considering the limitations of product liability and open source software.