Information technology — Security techniques — Application security (draft)
信息技术—安全技术—应用安全

该标准目前处于起草阶段。

标准介绍：

ISO/IEC 27034将是一个包含多个部分的标准。该标准通过一组与组织的系统开发生命周期相整合的过程，为规化、设计、选择和实施信息安全控制措施提供指南。该标准包含如下部分：

ISO/IEC 27034-1 - Information technology — Security techniques — Application security overview and concepts

ISO/IEC 27034-2 - Organization Normative Framework

ISO/IEC 27034-3 - Application Security Management Process

ISO/IEC 27034-4 - Application security validation

ISO/IEC 27034-5 - Protocols and application security control data structure

ISO/IEC 27034-6 - Security guidance for specific applications