Security Framework for Software Process Models: Measures for Establishing a Choice

The importance of incorporating Software Process Model (SPM) to system building set in motion the quest for the best criteria for selecting a suitable SPM for building software engineering projects. There has been good progress in identifying criteria for the selection of SPM however less have been said about incorporating security into the life cycle of a system. With the different forms of cyber and identity attacks moving up the stack and into the application layer, it is becoming more critical that software developers protect their customers by embedding security and privacy into their software. Security should be a factor throughout the whole life cycle of a system in order for development managers and information technology policy-makers to appraise the state of the security in development and create a vision and road map for reducing customer risk. This study therefore, proposed a framework for the selection of a suitable SPM that integrates security measures throughout a system`s life cycle.