Synthesizing secure software development activities for linear and agile lifecycle models. (30th January 2022)

• Record Type: Journal Article
• Authors: Alenezi, Mamdouh; Basit, Hamid Abdul; Beg, Maham Anwar; Shaukat, Muhammad Saad
• Is Part Of: Software, practice & experience. Volume 52:Number 6(2022)
• Page Start: 1426
• Page End: 1453
• Publication Date: 2022-01-30
• Subjects: knowledge management -- software engineering -- software security -- wiki platform; Computer software -- Periodicals; Computer programming -- Periodicals; Computer programs -- Periodicals; 005.3
• DOI: 10.1002/spe.3072
• Languages: English
• ISSNs: 0038-0644

Abstract

Abstract: Application security is an important concern, and security activities to support software development lifecycle processes, such as specification, design, implementation, and testing are increasingly in need. Despite the plethora of knowledge available for secure software development in online and books, software systems are seldom secure as developers lack security knowledge. The primary reason for this paradox is the diversity and overwhelming nature of the available security knowledge. In this article, we propose to synthesize the well‐known secure software development practices for both linear and agile lifecycle models. Using the MediaWiki platform, we make this knowledge available to software developers and designers from a single source.