Measures and Measurement for Secure Software Development

SEI Report
In this paper, the authors discuss how measurement can be applied to improve the security characteristics of the software being developed.
Publisher

Software Engineering Institute

Abstract

This article discusses how measurement can be applied to software development processes and work products to monitor and improve the security characteristics of the software being developed. It is aimed at practitioners—designers, architects, requirements specialists, coders, testers, and managers—who desire guidance as to the best way to approach measurement for secure development. It does not address security measurements of system or network operations.

Cite This SEI Report

Dekkers, C., Zubrow, D., & McCurley, J. (2013, July 3). Measures and Measurement for Secure Software Development. Retrieved August 16, 2026, from https://www.sei.cmu.edu/library/measures-and-measurement-for-secure-software-development/.

@techreport{dekkers_2013,
author={Dekkers, Carol and Zubrow, David and McCurley, Jim},
title={Measures and Measurement for Secure Software Development},
month={Jul},
year={2013},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/measures-and-measurement-for-secure-software-development/},
note={Accessed: 2026-Aug-16}
}

Dekkers, Carol, David Zubrow, and Jim McCurley. "Measures and Measurement for Secure Software Development." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, July 3, 2013. https://www.sei.cmu.edu/library/measures-and-measurement-for-secure-software-development/.

C. Dekkers, D. Zubrow, and J. McCurley, "Measures and Measurement for Secure Software Development," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 3-Jul-2013 [Online]. Available: https://www.sei.cmu.edu/library/measures-and-measurement-for-secure-software-development/. [Accessed: 16-Aug-2026].

Dekkers, Carol, David Zubrow, and Jim McCurley. "Measures and Measurement for Secure Software Development." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 3 Jul. 2013. https://www.sei.cmu.edu/library/measures-and-measurement-for-secure-software-development/. Accessed 16 Aug. 2026.

Dekkers, Carol; Zubrow, David; & McCurley, Jim. Measures and Measurement for Secure Software Development. Software Engineering Institute. 2013. https://www.sei.cmu.edu/library/measures-and-measurement-for-secure-software-development/