论文信息 - Lessons Learned with the Systems Security Engineering Capability Maturity Model

Lessons Learned with the Systems Security Engineering Capability Maturity Model

This paper describes the principles upon which the SSECMM is based, the structure of the model, and its use in appraisals. The paper discusses ex-periences in developing and piloting the model and method, and comments on the potential for using the model in process-based assurance.

Rick Hefner

[1] Eugen M. Bacic,et al. The Canadian trusted computer product evaluation criteria , 1990, ACSAC.

[2] Roger Bate,et al. A Systems Engineering Capability Maturity Model, Version 1.0. , 1994 .

[3] Mark C. Paulk,et al. Capability Maturity Model for Software, Version 1.1 , 1993 .