Abstract

Software provide services that may come with some vulnerabilities or risks. Attackers perform actions that break security of system through threats and cause a failure. To avoid security vulnerability, there are many security-specific concepts that should be determined as requirements during software development life cycle in order to deliver a strong and secure software. This paper first, survey a number of existing processes, life cycle and methodologies needed for developing secure software based on the related published works. It starts by presenting the most relevant Secure Software Development Lifecycles, a comparison between the main security features for each process is proposed. The results of the comparison will give the software developer with a guideline which will help on selecting the best secure process. Second, the paper list a set of the most widely used specification languages with the advantages and disadvantages for each.

Highlights

  • A secure software is the software where unauthorized person cannot access it, modify it, or attack it

  • This paper survey a set of secure software development life cycle processes, identify the characteristics for each one, and presents a comparison between them based on the security activities that are included in the development lifecycle, this will be useful for the software developers by helping him choosing the correct process

  • Choosing the suitable secure software development process is a challenging thing for the stakeholder to make the decision which one to use without knowing the difference between them

Read more

Summary

Introduction

A secure software is the software where unauthorized person cannot access it, modify it, or attack it. The degree of such security is measured by the existing number of security vulnerabilities. In order to include security in the software engineering, the security aspects should be included from the beginning of the software development life cycle. The secure software engineering is the process of designing, building, and testing software so that it becomes secure, this includes secure software development life cycle (SSDLC) processes and secure software development (SSD) methods. A SSDLC process considers security aspects of the software during the development life cycle by using SSD methods. This paper survey a set of secure software development life cycle processes, identify the characteristics for each one, and presents a comparison between them based on the security activities that are included in the development lifecycle, this will be useful for the software developers by helping him choosing the correct process

Software Security Goals
Software Security Basic Concepts
Attack
Secure Software Development Life Cycle processes
Agile Methods
Comparison of existing secure software development life cycle process SSDLC
Use secure resources
Ten ways to infuse security into your software development life cycle
Different Specification Languages
UMLSec
UMLIntr
AsmlSec
Snort Rules
Comparison of Existing Security Specification Languages
Fair Exchange
Confidentiality
UMLIntr added 19 stereotypes
Can not directly read HTTP packets
Security Software Testing
Findings
Summery and Conclusion
Full Text
Paper version not known

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call

Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.