A Comparative Overview of the Most Common Methodologies for Secure Software Development

Security is a property of an entire system in context. Rather than a software product; so a thorough understanding of system security risk analysis is necessary in the entire software life cycle for a successful project. This aspect is strongly related to costs, risks and reputation of an organization. Focus on security in the software development life cycle can be divided into two distinct categories: Internal security and External security. Internal security of software depends on the security of codes and applications used in software development. External security of software includes measurements to maintain security in the interaction with the external environment. In recent years, many methods have been developed to maintain internal security of software. The main goal of this paper is to present and compare the most common methodologies provided to ensure the internal security of the software systems.