Enhancing the Development Life Cycle to Product Secure Software, V2.0 Oct. 2008 - This report joins a growing body of software assurance information resources and tools provided through the Department of Homeland Security (DHS) BuildSecurityIn Web portal (https://buildsecurityin.us-cert.gov) that are intended to assist software developers, architects, acquirers, and educators in the improvement and verification of the quality, reliability, and security of the software they produce or procure-and in establishing the justification to use that software with confidence.
It is intended to complement the report titled "Software Security Assurance: A State-of-the-Art Report," since it describes in greater technical depth and detail the security principles and practices that software developers, testers, and integrators can adopt to achieve the twin objectives of producing more secure software-intensive systems, and verifying the security of the software they produce.