The ISDF Framework: Towards Secure Software Development

Alkussayer, Abdulaziz; Allen, William H.

doi:10.3745/jips.2010.6.1.091

Cited by 11 publications

(9 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These activities are described generally from a theoretical perspective and have a broader range of scope. The selection of the activities and execution order are left to the practitioner's discretion to make the processes more flexible and efficient [174].…”

Section: Claspmentioning

confidence: 99%

Security Requirements Engineering: A Framework for Cyber-Physical Systems

Réhman¹,

Allgaier

Gruhn

2018

2018 International Conference on Frontiers of Information Technology (FIT)

View full text Add to dashboard Cite

I would firstly like to thank God-Almighty for not only the ability, but also the constant strength and perseverance that kept me going through this thesis.Further, I would like to express my deepest gratitude to my supervisor, Professor Volker Gruhn, who has been a steady guide through the course of my research and has always been supportive of my academic endeavours -no matter which corner of the Earth they led me to -thereby allowing me to interact with and learn from excellent researchers in my field from around the globe. I am thankful for dedicating his time and effort and for always making me feel welcome at his office. I would also like to express my appreciation for Professor Matthias Book, who not only offered deep critical insights through his review of my thesis, but also went out of his way to make available to me certain academic opportunities that I found to be extremely valuable.I would also like to extend my thanks to all my colleagues in Paluno. It has been a great experience working with and exchanging ideas with them. All the talks, discussions and dissertation seminars have been invaluable experiences for me.Last but not least, I would like to give thanks to my family, particularly my mother, who has always been a pillar of support for me, and without whom I would not be where I stand today. I thank her for her prayers, her emotional support and for always giving me advice when I hit a rough patch in life and don't know what to do. My wife too, has been a constant source of strength for me, a companion, a friend and both a mother and father for my children in my absence. I thank her for all of this and for not killing me when I told her I would be living in a different country for the next three years. I'd like to thank my daughter Eshal and my son Shaheer for bearing with me patiently and not holding against me the time I could not give them in pursuit of my doctoral studies.

show abstract

Section: Claspmentioning

confidence: 99%

Security Requirements Engineering: A Framework for Cyber-Physical Systems

Réhman¹,

Allgaier

Gruhn

2018

2018 International Conference on Frontiers of Information Technology (FIT)

View full text Add to dashboard Cite

show abstract

“…Traditionally, security in software development is often viewed either as a remedy or patch deployed to solve security breaches or as an enhancement to a wholly developed software package [1]. As further emphasized by Alkussayer and Allen [1], developers only pay attention to security considerations as they approach the end of the development lifecycle, which is why such security solutions often come as add-on mechanisms and techniques before software systems deployment. Therefore, security issues were often reactively addressed when prompted by some undetected vulnerability or when such vulnerability may have even been exploited [1], [2].…”

Section: Introductionmentioning

confidence: 99%

Secure Software Development Awareness: A Case Study of Undergraduate Developers

Mutanga¹

2023

JREAS

View full text Add to dashboard Cite

As ubiquitous computing becomes an increasingly inherent component of everyday life due to the rapid growth of communication technologies and globalization, threats against information systems have taken a more latent yet lethal dimension. This emergent digital security challenge has correspondingly motivated a proactive change in the software engineering process in recent decades. This change has inspired more intense research scrutiny on security as a crucial component of any software system. Moreover, in today’s virtual world of hyperconnectivity, the most significant vulnerabilities in modern information systems security are software centred. Nevertheless, research shows that software developers often lack the required knowledge and skills in secure software systems development (SSD). Such knowledge ensures that all the resultant software components of each development lifecycle are correctly implemented rather than merely following the SSD lifecycle. Also, the knowledge engenders software security consciousness as a professional attitude amongst developers. Therefore, investigating students’ awareness of SSD principles can generate insight into evolving the undergraduate software development curriculum – a path to building future career developers. The study used a voluntary online survey to recruit a sample of 76 undergraduate developers and employed a descriptive approach to data analysis. Among other findings, the study revealed that participants' perception of the threat of software vulnerability impacts their attitude towards security on online and mobile platforms. And that though over 90% of the undergraduate developers took software vulnerability threats either “serious” or “extremely serious”, this disposition did not reflect the depth of their knowledge and experience in SSD.

show abstract

Section: Introductionmentioning

confidence: 99%

“…As further emphasized by Alkussayer and Allen [1], developers only pay attention to security considerations as they approach the end of the development lifecycle, which is why such security solutions often come as add-on mechanisms and techniques before software systems deployment. Therefore, security issues were often reactively addressed when prompted by some undetected vulnerability or when such vulnerability may have even been exploited [1,2].…”

Section: Introductionmentioning

confidence: 99%

“…However, in recent decants, there has been a pragmatic change away from this mundane approach for security in software development to embrace a more proactive approach that advocates the deliberate injection of forethought security ramifications into all stages of the software development lifecycle [1][2][3][4]. The emergent alternative to secure software development primarily recognizes security requirements as an integral element of the software design and development process; therefore, rather than treating security requirements as an ad-on or a corrective measure, it is implemented as a "designed-in" component.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Secure Software Development Awareness: A Case Study of Undergraduate Developers

Mutanga¹

2022

JES

View full text Add to dashboard Cite

As ubiquitous computing becomes an increasingly inherent component of everyday life due to the rapid growth of communication technologies and globalization, threats against information systems have taken a more latent yet lethal dimension. This emergent digital security challenge has correspondingly motivated a proactive change in the software engineering process in recent decades. This change has inspired more intense research scrutiny on security as a crucial component of any software system. Moreover, in today’s virtual world of hyperconnectivity, the most significant vulnerabilities in modern information systems security are software centred. Nevertheless, research shows that software developers often lack the required knowledge and skills in secure software systems development (SSD). Such knowledge ensures that all the resultant software components of each development lifecycle are correctly implemented rather than merely following the SSD lifecycle. Also, the knowledge engenders software security consciousness as a professional attitude amongst developers. Therefore, investigating students’ awareness of SSD principles can generate insight into evolving the undergraduate software development curriculum – a path to building future career developers. The study used a voluntary online survey to recruit a sample of 76 undergraduate developers and employed a descriptive approach to data analysis. Among other findings, the study revealed that participants’ perception of the threat of software vulnerability impacts their attitude towards security on online and mobile platforms. And that though over 90% of the undergraduate developers took software vulnerability threats either “serious” or “extremely serious”, this disposition did not reflect the depth of their knowledge and experience in SSD.

show abstract

The ISDF Framework: Towards Secure Software Development

Cited by 11 publications

References 24 publications

Security Requirements Engineering: A Framework for Cyber-Physical Systems

Security Requirements Engineering: A Framework for Cyber-Physical Systems

Secure Software Development Awareness: A Case Study of Undergraduate Developers

Secure Software Development Awareness: A Case Study of Undergraduate Developers

Contact Info

Product

Resources

About