Process · Embedded Software & Tools
Secure development lifecycle
A development process that builds in threat modelling, secure coding standards, code review, security testing and an incident response path, rather than auditing security at the end.
Standards such as IEC 62443-4-1 and ISO 21434 formalise it.
- Also known as
- SDL, SDLC (secure), SSDLC
- Type
- Process
- Domain
- Embedded Software & Tools, Software quality and safety
Notes
Regulation is making it compulsory: UNECE R155 for vehicles and the EU Cyber Resilience Act for connected products both require it.
Related terms
Part of the Embedded Software & Tools glossary, with every term in the topic and the lifecycles, tools and standards that use them.
Where it appears on the Hub
Used on 3 pages of the Hub. In each group, the pages that mention it most come first.
Lifecycle stages and gates
Suggest an improvement
Suggest an improvement to this entry
A clearer definition, an example, a correction or a source an editor can check. Editors review every suggestion before the entry changes.
Last reviewed: not yet reviewed in depth. Entry last updated . The full glossary