# Empirical Evaluation of Secure Development Processes

DevFeed: [Empirical Evaluation of Secure Development Processes](<https://devfeed.tech/articles/empirical-evaluation-of-secure-development-processes-36776.md>)

Original publisher: [Read original article](<https://shostack.org/blog/empirical-evaluation-of-secure-development-processes/>)

Author: Adam

Published: 2019-12-07T00:00:00Z

Content type: article

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Software Engineering](<https://devfeed.tech/topics/software-engineering.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [least privilege](<https://devfeed.tech/topics/least-privilege.md>)

Tags: [announcement](<https://devfeed.tech/tags/announcement.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [development](<https://devfeed.tech/tags/development.md>), [publications](<https://devfeed.tech/tags/publications.md>), [report](<https://devfeed.tech/tags/report.md>), [security-vulnerabilities](<https://devfeed.tech/tags/security-vulnerabilities.md>), [software](<https://devfeed.tech/tags/software.md>), [software-engineering](<https://devfeed.tech/tags/software-engineering.md>), [workshop](<https://devfeed.tech/tags/workshop.md>)

## AI overview

The author reports on a workshop at Schloss Dagstuhl about empirically evaluating secure development processes. The workshop report examines the lack of empirical data on how security principles, architectures, and methodologies affect resulting systems, making it harder for organizations to choose cost-effective practices for reducing vulnerabilities.

## Source excerpt

Earlier this year, I helped to organize a workshop at Schloss Dagstuhl on Empirical Evaluation of Secure Development Processes. I think the workshop was a tremendous success.