TU Darmstadt / ULB / TUbiblio

Literature Review of the Challenges of Developing Secure Software Using the Agile Approach

Oueslati, Hela ; Rahman, Mohammad Masudur ; Othmane, Lotfi Ben (2015)
Literature Review of the Challenges of Developing Secure Software Using the Agile Approach.
Toulouse, France
Konferenzveröffentlichung, Bibliographie

Kurzbeschreibung (Abstract)

A set of challenges of developing secure software using the agile development approach and methods are reported in the literature. This paper reports about a systematic literature review to identify these challenges and evaluates the causes of each of these challenges, with respect to the agile values, the agile principles, and the security assurance practices. We identified in this study 20 challenges, which are reported in 10 publications. We found that 14 of these challenges are valid and 6 are neither caused by the agile values and principles, nor by the security assurance practices. We also found that 2 of the the valid challenges are related to the software development life-cycle, 4 are related to incremental development, 4 are related to security assurance, 2 are related to awareness and collaboration, and 2 are related to security management. These results justify the need for research to make developing secure software smooth.

Typ des Eintrags: Konferenzveröffentlichung
Erschienen: 2015
Autor(en): Oueslati, Hela ; Rahman, Mohammad Masudur ; Othmane, Lotfi Ben
Art des Eintrags: Bibliographie
Titel: Literature Review of the Challenges of Developing Secure Software Using the Agile Approach
Sprache: Deutsch
Publikationsjahr: 2015
Buchtitel: Proc. of the 10th International Conference on Availability, Reliability and Security (ARES 2015)
Veranstaltungsort: Toulouse, France
Zugehörige Links:
Kurzbeschreibung (Abstract):

A set of challenges of developing secure software using the agile development approach and methods are reported in the literature. This paper reports about a systematic literature review to identify these challenges and evaluates the causes of each of these challenges, with respect to the agile values, the agile principles, and the security assurance practices. We identified in this study 20 challenges, which are reported in 10 publications. We found that 14 of these challenges are valid and 6 are neither caused by the agile values and principles, nor by the security assurance practices. We also found that 2 of the the valid challenges are related to the software development life-cycle, 4 are related to incremental development, 4 are related to security assurance, 2 are related to awareness and collaboration, and 2 are related to security management. These results justify the need for research to make developing secure software smooth.

Freie Schlagworte: Secure Software Engineering Group;Secure Services;secure software development, agile development, literature survey
ID-Nummer: TUD-CS-2015-0123
Fachbereich(e)/-gebiet(e): LOEWE > LOEWE-Zentren > CASED – Center for Advanced Security Research Darmstadt
20 Fachbereich Informatik > Datenbanken und Verteilte Systeme
LOEWE > LOEWE-Zentren
20 Fachbereich Informatik
LOEWE
Hinterlegungsdatum: 30 Dez 2016 20:23
Letzte Änderung: 30 Mai 2018 12:53
PPN:
Zugehörige Links:
Export:
Suche nach Titel in: TUfind oder in Google
Frage zum Eintrag Frage zum Eintrag

Optionen (nur für Redakteure)
Redaktionelle Details anzeigen Redaktionelle Details anzeigen