Extending the Agile Development Process to Develop Acceptably Secure Software

Download

index.pdf

Date

2014-11-01

Author

BEN OTHMANE, Lotfi
Angın, Pelin
WEFFERS, Harold
BHARGAVA, Bharat

Metadata

Show full item record

This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Item Usage Stats

187
views

175
downloads

The agile software development approach makes developing secure software challenging. Existing approaches for extending the agile development process, which enables incremental and iterative software development, fall short of providing a method for efficiently ensuring the security of the software increments produced at the end of each iteration. This article (a) proposes a method for security reassurance of software increments and demonstrates it through a simple case study, (b) integrates security engineering activities into the agile software development process and uses the security reassurance method to ensure producing acceptably secure-by the business owner-software increments at the end of each iteration, and (c) discusses the compliance of the proposed method with the agile values and its ability to produce secure software increments.

Subject Keywords

Electrical and Electronic Engineering

URI

https://hdl.handle.net/11511/43127

Journal

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING

DOI

https://doi.org/10.1109/tdsc.2014.2298011

Collections

Department of Computer Engineering, Article

Suggestions

OpenMETU
Core

Assessment of Agility in Software Organizations with a Web-Based Agility Assessment Tool Adali, Onat Ege; Özcan Top, Özden; Demirors, Onur (2017-09-01) Agile software development approaches have emerged to overcome the inherent challenges of the traditional software development methodologies. With that in mind, they offer a set of simple yet effective practices based on the values and supporting principles of the Agile Manifesto. Today, more and more organizations are practicing Agile but transitioning to Agile is not as straightforward as it might seem. The benefits afforded by the agile values, principles and practices are not fully obtained and adapters...
Testing distributed real-time systems with a distributed test approach Öztaş, Gökhan; Schmidt, Şenan Ece; Department of Electrical and Electronics Engineering (2008) Software testing is an important phase the of software development cycle which reveals faults and ensures correctness of the developed software. Distributed real-time systems are mostly safety critical systems for which the correctness and quality of the software is much more significant. However, majority of the current testing techniques have been developed for sequential (non real-time) software and there is a limited amount of research on testing distributed real-time systems. In this thesis, a proposed...
Evaluation of Agility Assessment Tools: A Multiple Case Study Adali, Onat Ege; Özcan Top, Özden; Demirors, Onur (2016-06-10) Agile software development has been one of the most important paradigms of software engineering community. Agile methods that are shaped around Agile Manifesto and principles, provide promising results when applied properly in software organizations. Agile assessment models and tools have potential to indicate agile adoption problems at project level or organization level. In the scope of this study, we identified 37 agility assessment tools. Among those tools, we evaluated 11 agility assessment tools based...
A Modular Real-Time Fieldbus Architecture for Mobile Robotic Platforms Saranlı, Uluç; Oeztuerk, M. Cihan (Institute of Electrical and Electronics Engineers (IEEE), 2011-03-01) The design and construction of complex and reconfigurable embedded systems such as small autonomous mobile robots is a challenging task that involves the selection, interfacing, and programming of a large number of sensors and actuators. Facilitating this tedious process requires modularity and extensibility both in hardware and software components. In this paper, we introduce the universal robot bus (URB), a real-time fieldbus architecture that facilitates rapid integration of heterogeneous sensor and actu...
An Agile business process software development methodology Çulha, Davut; Doğru, Ali Hikmet; Department of Computer Engineering (2014) An agile business process software development methodology is proposed, developed and tested in this research. To speed up the business process software development practices in the organization and to address the requirements more efficiently, an agile approach was adapted. Two new processes were developed using the new methodology. The improvement was assessed by utilizing nine older developments: A formula was developed in this research that estimates the development efforts for old business process soft...

Citation Formats

L. BEN OTHMANE, P. Angın, H. WEFFERS, and B. BHARGAVA, “Extending the Agile Development Process to Develop Acceptably Secure Software,” IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING, pp. 497–509, 2014, Accessed: 00, 2020. [Online]. Available: https://hdl.handle.net/11511/43127.