Secure software development lifecycle which supplements security weakness for CC certification

Abstract

The products delivered to governments and public authorities are required to obtain a certain EAL (Evaluation Assurance Level) after receiving a CC certification. Most of the SMEs that develop software usually don't take measures to systematically eliminate security weaknesses. That is why the development is terminated from phase of early development without consideration of the security and developers take charge of testing and manage security weaknesses while dedicated to unit testing and black box testing. In addition, due to the issue of cost, it doesn't have separate CC certification experts. In this paper, accordingly, we propose Secure Software Development Life Cycle (SSDLC) that can mitigate security weaknesses for CC certification which can be a guideline for developers from early phases of development by considering this situation. © 2016 International Information Institute.