Model and Implementation of a Secure SW-Development Process for Mission Critical Software

Abstract

With the growing dependency of many technical, commercial, administrative and even social processes from computer software, the number of mission critical software projects rapidly increases. The rapid integration of formerly stand-alone systems into global networks subjects these systems to yet unknown threats. Even mission critical systems may be deliberately manipulated to let malicious attackers access vital system functions or to take over the entire system. Though such systems feature protection mechanism during operation, they are rather vulnerable during their software design and development process. This paper defines a secure software development process to reduce the risk of manipulation and enhance the trustworthiness of critical software produced by renowned manufaturers according to high quality standards. It also explained how this process may be implemented cost efficiently.