Publication

Vehicle Electronics & Architecture (VEA)
2016

INCORPORATING CYBERSECURITY INTO THE SOFTWARE DEVELOPMENT LIFECYCLE

by Jonathan Dorny; Susan Ingenthron; Joe Erian; Matt Tarka; Kurt Hansen

Abstract

The proliferation of information technology adds expanded capabilities and exposes new vulnerabilities through cyber warfare. To combat new threats software quality must go beyond CMMI maturity levels and embrace a software development lifecycle (SDLC) with measurable cybersecurity assurance. Standard cybersecurity artifacts throughout the SDLC should be expected and available for inspection. Integrated software applications can confidently and rapidly reduce their threat exposure by incorporating reusable data management components with a pedigree of cybersecurity SDLC assurance evidence.