Jaatun, Martin Gilje; Cruzes, Daniela Soares; Tøndel, … - In: International Journal of Secure Software Engineering (IJSSE) 8 (2017) 4, pp. 1-30
When working with software security in a risk-centric way, development projects become equipped to make decisions on … authors found that their software security practices were not based on an assessment of software security risks, but rather …, with limited follow up on any security issues throughout their software development projects. Based on the results of the …