TU Darmstadt / ULB / TUbiblio

Practitioners Perspectives on Security in Agile Development

Bartsch, Steffen :
Practitioners Perspectives on Security in Agile Development.
FARES: 6th International Workshop on Frontiers in Availability, Reliability and Security IEEE Computer Society
[ Konferenzveröffentlichung] , (2011)

Kurzbeschreibung (Abstract)

Agile methods are widely employed to develop high-quality software, but theoretical analyses argue that agile methods are inadequate for security-critical projects. However, most agile-developed software today needs to satisfy baseline security requirements, so that we need to focus on how to achieve this this level for typical agile projects. In this paper, we provide insights from the practitioner's perspective on security in agile development and report on exploratory, qualitative findings from interviews. Our findings extend the theoretical prior work and suggest to focus on adequate customer involvement, developer security awareness and expertise, and continuously improving the development process for security.

Typ des Eintrags: Konferenzveröffentlichung
Erschienen: 2011
Autor(en): Bartsch, Steffen
Titel: Practitioners Perspectives on Security in Agile Development
Sprache: Englisch
Kurzbeschreibung (Abstract):

Agile methods are widely employed to develop high-quality software, but theoretical analyses argue that agile methods are inadequate for security-critical projects. However, most agile-developed software today needs to satisfy baseline security requirements, so that we need to focus on how to achieve this this level for typical agile projects. In this paper, we provide insights from the practitioner's perspective on security in agile development and report on exploratory, qualitative findings from interviews. Our findings extend the theoretical prior work and suggest to focus on adequate customer involvement, developer security awareness and expertise, and continuously improving the development process for security.

Buchtitel: FARES: 6th International Workshop on Frontiers in Availability, Reliability and Security
Verlag: IEEE Computer Society
Freie Schlagworte: Secure Data
Fachbereich(e)/-gebiet(e): 20 Fachbereich Informatik > Theoretische Informatik - Kryptographie und Computeralgebra
LOEWE > LOEWE-Zentren > CASED – Center for Advanced Security Research Darmstadt
20 Fachbereich Informatik > SECUSO - Security, Usability and Society
LOEWE > LOEWE-Zentren
20 Fachbereich Informatik
LOEWE
Veranstaltungsort: Vienna, Austria
Hinterlegungsdatum: 28 Jul 2016 18:35
DOI: 10.1109/ARES.2011.82
ID-Nummer: Bartsch11a
Export:

Optionen (nur für Redakteure)

Eintrag anzeigen Eintrag anzeigen