ISO/IEC 27034-6:2016 PDF

Name: ISO/IEC 27034-6:2016 — Information technology — Security techniques — Application security — Part 6: Case studies
SKU: ISO/IEC 27034-6:2016
Price: 25 EUR
Availability: InStock

Information technology — Security techniques — Application security — Part 6: Case studies

Название (английский):

ISO/IEC 27034-6:2016

Information technology — Security techniques — Application security — Part 6: Case studies

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 70
Дата публикации:: 5 октября 2016 г.
Издание:: ISO/IEC IS 27034 edition 1 version 1
ICS:: 35.030

Тип поставки:

Full version1 050 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:12 раб. дн. (перевод)

Цена:1 050 €

Описание (английский):

ISO/IEC 27034-6:2016 provides usage examples of ASCs for specific applications. NOTE Herein specified ASCs are provided for explanation purposes only and the audience is encouraged to create their own ASCs to assure the application security.

Abstract

Похожие стандарты

Упомянутые в описании и другие стандарты ISO

Overview

ISO/IEC 27034-6:2016 - part of the ISO/IEC 27034 series on application security - delivers practical case studies and usage examples of Application Security Controls (ASCs). Rather than normative prescriptions, this part provides realistic ASC examples (for instance, a Java mobile application code-review ASC), XML representation examples, and guidance on adapting ASCs to an organization’s context. The standard helps organizations implement the Application Security Framework and Organizational Normative Framework (ONF) described across ISO/IEC 27034.

Key topics and technical highlights

Application Security Controls (ASCs): focused examples showing how to define, structure and use ASCs to address application-level threats.

ASC representation: examples use the XML data structure recommended in ISO/IEC 27034-5-1 to enable consistent ASC exchange and implementation.

Case studies included: Java code revision for mobile apps; privacy requirements spanning two countries; integration and implementation of third‑party ASCs; use of the Application Security Life Cycle Reference Model (ASLCRM); and integrating ASCs into a secure development life cycle (SDLC).

Application levels of trust and information classification: practical categorization examples (e.g., baseline → private) and how ASC selection maps to those tiers.

Secure development life cycle phases: mapped ASC activities across preparation, requirements, design, implementation, verification, release and sustainment phases.

Annex A: informative XML examples supporting the case studies and demonstrating ASC encoding for tool or process integration.

Audience and role guidance: targeted at domain experts, application security teams, developers, auditors and organizational ONF committees responsible for ASC creation, validation and maintenance.

Practical applications - who uses this standard

Application security teams and developers: adopt the ASC examples (e.g., code review ASC for Java mobile apps) as starting points for project-level controls.

Security architects and ONF committees: adapt case-study patterns to build an organizational ASC library and policy mapping.

Tool vendors and integrators: use the XML examples to support ASC import/export and automation across SDLC tools.

Auditors and compliance teams: validate that ASCs have been defined and implemented consistently across application lifecycles.

Related standards (if applicable)

ISO/IEC 27034 series (general framework and other parts) - ISO/IEC 27034-1 (concepts/definitions) and ISO/IEC 27034-5-1 (ASC XML data structure) are specifically referenced in the case-study context.

By providing concrete ASC templates, XML examples and SDLC mappings, ISO/IEC 27034-6:2016 helps organizations translate application-security principles into implementable controls and repeatable processes.

ISO/IEC 27034-6:2016 PDF

Abstract

Похожие стандарты

Overview

Key topics and technical highlights

Practical applications - who uses this standard

Related standards (if applicable)

Технические детали

ISO/IEC 27034-1:2011

Information technology — Security techniques — Application security — Part 1: Overview and concepts

ISO 8689-1:2000

Water quality — Biological classification of rivers — Part 1: Guidance on the interpretation of biological qu…

ISO/ASTM51540-04(2012)

Standard Practice for Use of a Radiochromic Liquid Dosimetry System (Withdrawn 2020)

ISO/ASTM51204-04

Standard Practice for Dosimetry in Gamma Irradiation Facilities for Food Processing (Withdrawn 2013)

ISO/ASTM51431-05

Standard Practice for Dosimetry in Electron Beam and X-Ray (Bremsstrahlung) Irradiation Facilities for Food P…

ISO/ASTM52628-20e1

Standard Practice for Dosimetry in Radiation Processing

ISO/ASTM52921-13(2019)

Standard Terminology for Additive Manufacturing—Coordinate Systems and Test Methodologies

ISO/ASTMTR52917-EB

Additive Manufacturing — Round Robin Testing — General Guidelines