Special Checklist for Security Requirements in Software Development Site

摘要

Requirements in security area are not same with other research areas. Security-related requirements are listed into Protection Profile (PP). A protection profile defines an implementation-independent set of security requirements for a category of Target of Evaluations. Generally, PP contains functional requirements and security assurance requirements about the security of development environment for IT product or system and PP can applied to development site. This paper proposes some security-related check points for development site can be included into PP by analyzing ISO/IEC 15408 and ISO/IEC 21827.