Meeting Real Challenges in Eliciting Security Attributes for Mobile Application Development

Abstract

There has been a rapid growth in the development of mobile application resulting from its wide usage for online transaction, data storage and exchange of information. However, an important issue that has been overlooked is the lack of emphasis on the security issues at the early stage of the development. In fact, security issues have been kept until the later stage of the implementation of mobile apps. Requirements engineers frequently ignore and incorrectly elicit security-related requirements at the early stage of mobile application development. This scenario has led to the failure of developing secure and safe mobile application based on the needs of the users. As such, this paper intends to provide further understanding of the real challenges in extracting security attributes for mobile application faced by novice requirements engineers. For this purpose, two experiments on eliciting security attributes requirements of textual requirements scenario were conducted. The performance related to the correctness and time taken to elicit the security attributes were measured and recorded. It was found that the process of eliciting correct security attributes for mobile application requires effort, knowledge and skills. The findings indicate that an automated tool for correct elicitation security attributes requirement could help to overcome the challenges in eliciting security attributes requirements, especially among novice requirements engineers.☞ keyword : Security requirement, security attribute, mobile application development

Development of Arduino applications for IoT applications in software engineering education: a systematic literature review

“…The success of Arduino applications reflects how they are designed and implemented during the software development phases. This can be taken to mean that, to develop high-quality information and communication technology (ICT) systems, the requirements to developing such quality must be considered [6] and elicit and validate as earlier in software engineering phase [7], [8]. Therefore, the software engineering phase is an essential process in the development of Arduino software applications, which could involve research into robotics and computing.…”