CERT
search  



 
Historical Documents CMU Heinz College CMU School of Computer Science CyLab
 

Cyber Security Engineering

The cyber security engineering team addresses security and survivability throughout the development and acquisition life cycles, especially in the early stages. We have created methods and solutions that can be integrated into your existing practices. Learn more about how your organization can benefit.

In addition, our software assurance curriculum helps prepare the next generation of software security experts.

Solutions for Software Engineers

Software assurance is more than checking off boxes for compliance. Click on the graphic below to learn more about how our work in the following areas can help you understand and implement software assurance.

  • Security Quality Requirements Engineering (SQUARE): Learn how to build security into the early stages of the production cycle through this nine-step process. Tools are available that adapt the SQUARE process to consider privacy requirements (P-SQUARE) and acquisition (A-SQUARE).
  • Supply Chain Assurance: Learn how you can reduce risk from software defects while leveraging the significant opportunities afforded by supply chains.
  • Software Security Assurance Measurement and Analysis: Learn how to establish and measure justified confidence that a software-reliant product is sufficiently secure to meet operational needs.
  • Survivability Analysis Framework (SAF): Learn how to analyze complexity and integration issues throughout the development life cycle to ensure that development is proceeding as planned, and how to link security decisions to mission-critical needs.
  • Complexity Modeling and Analysis: Learn how modeling can offer a viable, reasoned way to describe problem complexity within the security assurance ecosystem and with sufficient insight to identify opportunities for real improvement.

These solutions also support critical, security-focused activities in the Microsoft Security Development Lifecycle.

Software Assurance Curriculum

To help meet the demand for skilled professionals who can build security and correct functionality into software development, we developed a software assurance curriculum and other educational materials for undergraduate, graduate, and community college levels.

Key Presentations and Publications

General Information


Security Quality Requirements Engineering (SQUARE)

more publications...

Supply Chain Assurance


Software Security Measurement and Analysis


Survivability Analysis Framework (SAF)


Complexity Modeling and Analysis


Software Assurance Curriculum

more publications...


Last updated July 31, 2012
Establish Security Requirements Validate Security Requirements Assured Supply Chain Analysis Measure Software Program Security Risks Monitor Evolving Threats Measure System Product Security Risks Mission Thread Analysis for Security Complexity Analysis