Toward a readiness model for secure software coding. (9th December 2022)

• Record Type: Journal Article
• Authors: Humayun, Mamoona; Niazi, Mahmood; Jhanjhi, Noor Zaman; Mahmood, Sajjad; Alshayeb, Mohammad
• Is Part Of: Software, practice & experience. Volume 53:Number 4(2023)
• Page Start: 1013
• Page End: 1035
• Publication Date: 2022-12-09
• Subjects: secure coding -- secure SDLC -- readiness model -- case study; Computer software -- Periodicals; Computer programming -- Periodicals; Computer programs -- Periodicals; 005.3
• DOI: 10.1002/spe.3175
• Languages: English
• ISSNs: 0038-0644

Abstract

Abstract: The heart of the application's secure operation is its software code. If the code contains flaws, the entire program might be hacked. The issue with software vulnerabilities is that they reveal coding flaws that hackers could exploit. The prevention of cybersecurity issues begins with the program code itself. When writing software code, a software developer must consider expressing the application's architecture and design requirements, keeping the code streamlined and efficient, and ensuring the code is safe. Secure code helps save the system from various cyber‐attacks by eliminating the weaknesses that many hacks rely on. To assist the software organization in Secure Software Coding (SSC), this article proposes a readiness model for SSC, namely SSCRM. The proposed model has five levels; SSC challenges and best practices (BP) are mapped at each level. The proposed model will help the organizations better understand SSC challenges and BPs and provide a roadmap for developing secure software code. The proposed model was evaluated using three case studies. The findings demonstrate that the proposed approach helps determine an organization's SSC level.