Chapter 8 - Secure Development Life Cycle

Abstract

A sound security architecture and the implementing technologies that have been discussed in previous chapters address only part of the challenge. To ensure security in Smart Grid, from development via roll-out to operation, proven development processes and management are needed to minimize or eliminate security vulnerabilities that are introduced in the development lifecycle. As a system of systems, the Smart Grid consists of software components that have varied security and assurance levels, and diverse origins and development processes. Building security into Smart Grid from the component to the system level requires appropriate methods and techniques to rigorously address many heterogeneous security issues in all phases of the software and system development lifecycle. This chapter examines security considerations in all phases of the Smart Grid system development lifecycle, identifying industrial best practices and research activities, and describes a system development lifecycle process with existing and emerging methods and techniques for Smart Grid security.