| Home > Publications > Reports > Informatics (CW) |
CW 501
Koen Buyens, Johan Grégoire, Bart De Win, Riccardo Scandariato, and Wouter Joosen
Similarities and differences between CLASP, SDL, and Touchpoints: the activity-matrix
Abstract
Development processes for software construction are common knowledge and mainstream practice in most development organizations. Unfortunately, these processes offer little support in order to meet security requirements. Over the years, research efforts have been invested in specific methodologies and techniques for secure software engineering, yet dedicated processes have been proposed only recently.
This report presents the results of a comparative study of three high- profile processes for the development of secure software, namely OWASP's CLASP, Microsoft's SDL and McGraw's Touchpoints. The key contribution of the report is a comprehensive model for comparison, the activity-matrix, which lists and relates all activities of the different processes and facilitates the identification of similarities and differences between the processes.
report.pdf (600K) / mailto: K. Buyens