ISO27034是国际标准化组织通过的第一个关注建立安全软件程序流程和框架的标准。ISO27034（也是IEC27034）由六部分内容组成。 ISO/IEC 27034-1 - Information technology — Security techniques — Application security overview and concepts ISO/IEC 27034-2 - Organization Normative Framework ISO/IEC 27034-3 - Application Security Management Process ISO/IEC 27034-4 - Application security validation ISO/IEC 27034-5 - Protocols and application security control data structure ISO/IEC 27034-6 - Security guidance for specific applications