Search Results - isPartOf:"Software"

Agile Threat Assessment and Mitigation: An Approach for Method Selection and Tailoring

Teichmann, Clemens; Renatus, Stephan; Eichler, Jörn - In: International Journal of Secure Software Engineering (IJSSE) 7 (2016) 1, pp. 1-16

Security engineering and agile development are often perceived as a clash of cultures. To address this clash, several approaches have been proposed that allow for agile security engineering. Unfortunately, agile development organizations differ in their actual procedures and environmental...

Persistent link: https://www.econbiz.de/10012048068

Evaluation of the Challenges of Developing Secure Software Using the Agile Approach

Ghani, Imran; Arbain, Adila Firdaus Bt; Oueslati, Hela; … - In: International Journal of Secure Software Engineering (IJSSE) 7 (2016) 1, pp. 17-37

A set of challenges of developing secure software using the agile development approach and methods are reported in the … also found that 2 of the valid challenges are related to the software development life-cycle, 4 are related to incremental … management. These results justify the need for research to make developing secure software smooth. …

Persistent link: https://www.econbiz.de/10012048069

Steps Towards Fuzz Testing in Agile Test Automation

Pietikäinen, Pekka; Kettunen, Atte; Röning, Juha - In: International Journal of Secure Software Engineering (IJSSE) 7 (2016) 1, pp. 38-52

Including and automating secure software development activities into agile development processes is challenging. Fuzz … testing is a practical method for finding vulnerabilities in software, but has some characteristics that do not directly map …. The authors present experiences and practical ways to utilize fuzzing in software development, and generic ways for …

Persistent link: https://www.econbiz.de/10012048070

Fuzzy Rule-Based Vulnerability Assessment Framework for Web Applications

Shahriar, Hossain; Haddad, Hisham - In: International Journal of Secure Software Engineering (IJSSE) 7 (2016) 2, pp. 1-18

This paper addresses the problem of assessing risk in web application due to implementation level vulnerabilities. In particular, the authors address the common research challenge of finding enough historical data to compute the probability of vulnerabilities and exploitations. They develop a...

Persistent link: https://www.econbiz.de/10012048071

The Case for Privacy Awareness Requirements

Omoronyia, Inah - In: International Journal of Secure Software Engineering (IJSSE) 7 (2016) 2, pp. 19-36

software systems. In this paper, the author advocates a systematic approach to considering privacy awareness. He characterizes … awareness requirements to anchor the consideration of privacy awareness needs of software systems. Based on these needs, an …

Persistent link: https://www.econbiz.de/10012048072

An Incremental B-Model for RBAC-Controlled Electronic Marking System

Aziz, Benjamin; Al-hadhrami, Nasser; Othmane, Lotfi ben - In: International Journal of Secure Software Engineering (IJSSE) 7 (2016) 2, pp. 37-64

The incremental development of software through the addition of new features and the insertion of new access rules … Access Control (RBAC) models of these software using the B language and re-evaluating the consistency of the models following …

Persistent link: https://www.econbiz.de/10012048073

Towards Ontological Approach to Security Risk Analysis of Information System: Model and Architecture

Arogundade, Oluwasefunmi ‘Tale; Adeniran, Olusola; … - In: International Journal of Secure Software Engineering (IJSSE) 7 (2016) 3, pp. 1-25

Resource allocation decisions can be enhanced by performing risk assessment during the early development phase. In order to improve and maintain the security of the Information System (IS, hereafter), there is need to build risk analysis model that can dynamically analyze threat data collected...

Persistent link: https://www.econbiz.de/10012048074

An Exploratory Study of the Security Design Pattern Landscape and their Classification

Ponde, Poonam; Shirwaikar, Shailaja - In: International Journal of Secure Software Engineering (IJSSE) 7 (2016) 3, pp. 26-43

good system design is based on sound software engineering principles which leverages proven best practices in the form of …

Persistent link: https://www.econbiz.de/10012048075

Migration Goals and Risk Management in Cloud Computing: A Review of State of the Art and Survey Results on Practitioners

Islam, Shareeful; Fenz, Stefan; Weippl, Edgar; … - In: International Journal of Secure Software Engineering (IJSSE) 7 (2016) 3, pp. 44-73

Organizations are now seriously considering adopting cloud into the existing business context, but migrating data, application and services into cloud doesn't come without substantial risks. These risks are the significant barriers for the wider cloud adoption. There are works that consolidate...

Persistent link: https://www.econbiz.de/10012048076

Survey of Vulnerabilities and Mitigation Techniques for Mooc-Based Applications

Shahriar, Hossain; Haddad, Hisham M.; Lebron, David; … - In: International Journal of Secure Software Engineering (IJSSE) 7 (2016) 4, pp. 1-18

learning materials at low cost. Many of the well-known MOOCs have adopted open source software and database technologies and … frequently operate within cloud environments. It is likely that the well-known software security vulnerabilities may manifest to …

Persistent link: https://www.econbiz.de/10012048077