TU Darmstadt / ULB / TUbiblio

Towards effective security assurance for incremental software development - the case of zen cart application,

Ali, Azmzt and Othmane, Lotfi Ben :
Towards effective security assurance for incremental software development - the case of zen cart application,.
Proc. of the 11th International Conference on Availabil- ity, Reliability and Security (ARES)
[Conference or Workshop Item] , (2016)

Abstract

Incremental software development methods, such as Scrum embrace code changes to meet changing customer requirements. However, changing the code of a given software invalidates the security assurance of the software. Thus, each new version of a given software requires a new full security assessment. This paper investigates the impact of incremental development of software on their security assurances using the e-commerce software Zen Cart as a case study. It also describes a prototype we are developing to design security assurance cases and trace the impact of code changes on the security assurance of the given software. A security assurance case shows how a claim, such as ”The system is acceptably secure” is supported by objective evidence.

Item Type: Conference or Workshop Item
Erschienen: 2016
Creators: Ali, Azmzt and Othmane, Lotfi Ben
Title: Towards effective security assurance for incremental software development - the case of zen cart application,
Language: German
Abstract:

Incremental software development methods, such as Scrum embrace code changes to meet changing customer requirements. However, changing the code of a given software invalidates the security assurance of the software. Thus, each new version of a given software requires a new full security assessment. This paper investigates the impact of incremental development of software on their security assurances using the e-commerce software Zen Cart as a case study. It also describes a prototype we are developing to design security assurance cases and trace the impact of code changes on the security assurance of the given software. A security assurance case shows how a claim, such as ”The system is acceptably secure” is supported by objective evidence.

Title of Book: Proc. of the 11th International Conference on Availabil- ity, Reliability and Security (ARES)
Uncontrolled Keywords: Cloud Security;Secure Software Engineering Group;agile security, zen cart, incremental development
Divisions: LOEWE > LOEWE-Zentren > CASED – Center for Advanced Security Research Darmstadt
LOEWE > LOEWE-Zentren > CRISP - Center for Research in Security and Privacy
Profile Areas > Cybersecurity (CYSEC)
LOEWE > LOEWE-Zentren
Profile Areas
LOEWE
Date Deposited: 30 Dec 2016 20:23
Identification Number: TUD-CS-2016-0123
Related URLs:
Export:

Optionen (nur für Redakteure)

View Item View Item