A Framework for Corporate Training Programs on the Principles of Secure Software Development

http://www.safecode.org/publications/SAFECode_Training0409.pdf 1.9M

Based on an analysis of the individual software assurance efforts of SAFECode members, the paper outlines a core set of secure development practices that can be applied across diverse development environments to improve software security.

http://www.safecode.org/publications/SAFECode_Dev_Practices1108.pdf 2.1M

The report outlines the secure development methods and integrity controls currently used by SAFECode members to deliver high-assurance systems to government and commercial customers.

http://www.safecode.org/publications/SAFECode_BestPractices0208.pdf 1.7M
http://www.safecode.org/publications/SAFECode_BestPractices0208_plain.pdf 807K (less graphics)