Software Development Life Cycle Research Articles

Exploring the use of gamification in human-centered agile-based requirements engineering

Gamification has become prevalent in educational settings, particularly in human-centered software engineering. Using gamified learning environments for comprehending software engineering concepts can significantly enhance students’ human factors, including motivation, engagement, and cognitive and critical thinking skills. Software requirements engineering constitutes one of the disciplines in the software development lifecycle. Based on the literature concerning agile-based software requirements engineering, coping with changing user requirements and constant alterations is often challenging. Consequently, both students and software developers must thoroughly grasp agile-based software requirements engineering. Over the last few years, educators and researchers have crafted gamified learning environments for agile-based software requirements engineering activities. Therefore, this paper aims to investigate the effectiveness of agile-based software requirements engineering activities through a gamified design approach. For this purpose, an application, ReGile, was developed and evaluated with 87 second and third-year software engineering students using the M-3 evaluation framework. Overall, the results were promising. Students expressed satisfaction with ReGile’s technological usability. They performed well (72.14%) in answering questions related to software requirements engineering and agile methodology concepts. Furthermore, gender-wise results indicated that male students outperformed female students when using ReGile.

Secure aware software development life cycle on medical datasets by using firefly optimization and machine learning techniques

The abstract highlights the critical need for securing sensitive medical data, emphasizing the challenges in the medical domain due to the confidentiality of patient, disease, doctor, and staff information. The proposed study introduces a novel approach using machine learning, specifically integrating the firefly optimization technique with the random forest algorithm, to classify medical data in a secure manner. The significance lies in addressing the security concerns associated with medical datasets, offering a solution that prioritizes confidentiality throughout the software development life cycle (SDLC). The proposed algorithm achieves an impressive accuracy of 96%, showcasing its efficacy in providing a robust and secure framework for the development of applications involving medical data. This research contributes to advancing the field of medical data security, offering a practical solution for safeguarding sensitive information in healthcare applications.

Evolution of secure development lifecycles and maturity models in the context of hosted solutions

AbstractOrganizations creating software commonly utilize software development lifecycles (SDLCs) to structure development activities. Secure development lifecycles (SDLs) integrate into SDLCs, adding security or compliance activities. They are widely used and have been published by industry leaders and in literature. These SDLs, however, were mostly designed before or while cloud services and other hosted solutions became popular. Such offerings widen the provider's responsibilities, as they not only deliver software but operate and decommission it as well. SDLs, however, do not always account for this change. Security maturity models (SMMs) help to assess SDLs and identify improvements by introducing a baseline to compare against. Multiple of these models were created after the advent of hosted solutions and are more recent than commonly referenced SDLs. Recent SMMs and SDLs may therefore support hosted solutions better than older proposals do. This paper compares a set of current and historic SDLs and SMMs in order to review their support for hosted solutions, including how support has changed over time. Security, privacy, and support for small or agile organizations are considered, as all are relevant to hosted solutions. The SDLs analyzed include Microsoft's SDL, McGraw's Touchpoints, the Cisco's SDL, and Stackpole and Oksendahl's SDL2. The SMMs reviewed are OWASP's Software Assurance Maturity Model 2 and DevSecOps Maturity Model. To assess the support for hosted solutions, the security and privacy activities foreseen in each SDLC phase are compared, before organizational compatibility, activity relevance, and efficiency are assessed. The paper further demonstrates how organizations may select and adjust a suitable proposal. The analyzed proposals are found to not sufficiently support hosted solutions: Important SDLC phases, such as solution retirement, are not always sufficiently supported. Agile practices, such as working in sprints, and small organizations are often not sufficiently considered as well. Efficiency is found to vary based on the application context. A clear improvement trend from before the proliferation of hosted solutions cannot be identified. Future work is therefore found to be required.

Sistem Informasi Manajemen Pengawasan Dan Pengendalian (WASDAL) Menara Telekomunikasi (Studi Kasus: Dinas Komunikasi Dan Informatika Kota Cimahi)

Telecommunication tower management information system is a crucial data processing system for telecommunication tower fee collection, given the importance of having an efficient and integrated system. However, the Department of Communication and Informatics of Cimahi City still lacks an integrated system, resulting in a slower telecommunication tower fee collection process. To address this issue, a Website named Telecommunication Tower Supervision and Control Management Information System (Wasdal) was developed as an integrated system to facilitate the fee collection process and generate fee collection reports. The methodology employed in this research is the Software Development Life Cycle (SDLC), and the Website is constructed using Laravel framework, Bootstrap, and MySQL database. The implementation results reveal that the overall built management information system Website meets user requirements. The User Acceptance Test (UAT) outcomes indicate average parameter scores of design (78%), features (79.20%), user satisfaction (80.60%), with an overall testing score of 81.3%.

Security and Privacy Challenges in Software as a Service (SaaS)

This document In the rapidly evolving landscape of cloud computing, Software as a Service (SaaS) has emerged as a dominant model for delivering software applications over the internet. However, this model introduces significant security and privacy challenges. This research paper delves into these issues, highlighting the unique risks associated with SaaS platforms. The study explores common vulnerabilities such as data breaches, unauthorized access, data loss, and identity theft, which are exacerbated by the centralized nature of SaaS solutions where data is stored on remote servers managed by service providers. To address these challenges, the paper underscores the importance of robust security measures, including encryption, access controls, and secure software development practices. Additionally, it emphasizes the necessity for SaaS providers to adopt advanced privacy protection techniques like data anonymization and differential privacy to meet user expectations and comply with stringent legal regulations such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Through a comprehensive review of literature and analysis of current SaaS security practices, the research identifies critical risks and provides strategic recommendations for enhancing security and privacy in SaaS environments. By integrating multiple layers of security throughout the software development lifecycle, enforcing strict access management protocols, and ensuring compliance with regulatory standards, SaaS providers can significantly mitigate risks and safeguard sensitive user data. The findings of this study highlight the imperative for continuous improvement in SaaS security strategies to keep pace with emerging threats and technological advancements. Ultimately, by prioritizing security and privacy, SaaS providers can not only protect their users but also gain a competitive edge in the increasingly crowded market of cloud services.

Modeling Reliability-Driven Software Release Strategy Considering Testing Effort with Fault Detection and Correction Processes: A Control Theoretic Approach

In this paper, we have introduced a software reliability growth model (SRGM) that integrates a Weibull testing effort function (TEF) within the software fault detection process (FDP) and fault correction process (FCP), effectively capturing the intricacies of software testing. Leveraging the least squared estimation method, we estimated both model parameters and the TEF, leading to a notably improved fit with the dataset and enhancing our comprehension of software reliability dynamics. Our approach also involved employing a reliability-based method to identify the optimal time for software release, further reinforcing the robustness of our model. Subsequently, we devised an optimal control model to minimize testing efforts throughout the software development life cycle. This work provides a comprehensive methodological framework for computing the total cost while ensuring debugging costs follow a learning curve pattern. Through numerical simulations involving hypothetical values and the Weibull TEF, we observed that once the software achieves the desired reliability for release, subsequent costs gradually decline to zero. In essence, both testing and future costs converge to zero post-release, reducing instantaneous expenses.

Understanding the GDPR from a requirements engineering perspective—a systematic mapping study on regulatory data protection requirements

AbstractData protection compliance is critical from a requirements engineering (RE) perspective, both from a software development lifecycle (SDLC) perspective and regulatory compliance. Not including these requirements from the early phases of the SDLC can prove costly and challenging afterward. The general data protection regulation (GDPR) from the European Union (EU) sets a list of requirements that organizations working within its scope should satisfy. However, these requirements are complex to work with, as legal prose tends to be vague and imprecise, and not all requirements have received the same attention from researchers. This study aims to identify the research published in RE for helping compliance with regulatory data protection requirements. We gathered and analyzed 90 articles from 2016 to 2022 through a systematic mapping study. We analyzed key trends in the sample, such as year of publication, publication venue, type of research, interdisciplinarity in the author’s background, GDPR focus of compliance element, and type of proposal. Our main findings show ongoing interest, mostly published in conferences, in achieving overall compliance with the GDPR and consent as the most popular topics. Other topics, such as cookies or children’s data, did not receive significant attention. Research over the whole RE process has been done. 20 (22%) of the papers have authors affiliated with non-computer science; however, most research seems not interdisciplinary. We finally discuss gaps in the literature, possible future areas of research, and the importance of interdisciplinary research for regulatory data protection requirements in RE.

Adopting security practices in software development process: Security testing framework for sustainable smart cities

The dependence on smart city applications has expanded in recent years. Consequently, the number of cyberattack attempts to exploit smart application vulnerabilities significantly increases. Therefore, improving smart application security during the software development process is mandatory to ensure sustainable smart cities. But the challenge is how to adopt security practices in the software development process. There are Several established and mature security testing frameworks exist that consider security requirements and testing during Several already established and mature security testing frameworks exist that consider security requirements and testing during Software Development Life Cycle (SDLC), but there is a unique challenges posed by smart city applications and the need for a comprehensive approach to address the evolving threat landscape in this context. This paper proposed a framework that adopts security testing practices in all phases of the software development process. The proposed framework identifies several security activities and steps that can be applied in each phase of the software development process.

Trustworthy and collaborative traceability management: Experts’ feedback on a blockchain‐enabled framework

AbstractBlockchain technology has attracted significant attention in both academia and industry. Recently, the application of blockchain has been advocated in software engineering. The global software engineering paradigm exacerbates trust issues, as distributed and cross‐organizational teams need to share software artifacts. In such a context, there is a need for a decentralized yet reliable traceability knowledge base to keep track of what/how/when/by whom software artifacts were created or changed. This study presents a blockchain‐enabled framework for trustworthy and collaborative traceability management and identifies benefits, challenges, and potential improvements based on the feedback of software engineering experts. A qualitative approach was followed in this study through semistructured interviews with software engineering (SE) experts. Transcripts were analyzed by applying the content analysis technique. The results indicated the emergence of five categories, further grouped into three main categories: experts' perceptions, blockchain‐based software process improvement, and experts' recommendations. In addition, the findings suggested four archetypes of organizations that may be interested in blockchain technology: distributed organizations, organizations with contract‐based projects, organizations in regulated domains, and regulators who may push the use of this technology. Further efforts should be devoted to the integration of the proposal with tools used throughout the software development lifecycle and leveraging the potential of smart contracts in validating the implementation of requirements automatically.

DEVELOPMENT OF A WEB-BASED APPLICATION FOR MANAGING ASSESSMENT AND INTERVIEW ACTIVITIES AT PT. GAIA SOLUTIONS

Information systems have significantly evolved in tandem with advancements in information technology. This evolution has led PT Gaia Solution to transform from conventional business practices to digital systems, particularly for managing assessments and interviews. The transformation aims to create a web application dedicated to handling assessment and interview operations at PT Gaia Solution. This study adopts the Software Development Life Cycle (SDLC) methodology using the waterfall model, which consists of the stages of requirements analysis, system design, implementation, testing, and evaluation. Application evaluation shows satisfactory results, with blackbox testing achieving a 100% success rate and high UI/UX satisfaction among users. The application was completed on time according to the set deadline and provides speed and performance that meet expectations. The outcome is a fully functional website that effectively addresses PT Gaia Solution's requirements for managing assessments and interview activities. By overcoming the limitations of the conventional system, this transformation boosts the overall efficiency and effectiveness of the company's processes. This success demonstrates that the implementation of SDLC with a waterfall approach can produce an effective web-based application as a form of transformation from conventional to digital systems at PT Gaia Solution, particularly for assessment and interview activities. This transformation can be immediately implemented and provides significant benefits to the company, including improved operational performance, data accuracy, and flexibility.

Automated Testing in DevOps: Strategies and Tools

Automated testing is a cornerstone of the DevOps methodology, enabling rapid and reliable software delivery. This paper explores the strategies and tools integral to implementing effective automated testing within a DevOps framework. Key strategies include continuous testing, shift-left testing, and test-driven development, among others. The paper also provides an overview of various tools that facilitate automated testing at different stages of the software development lifecycle, from unit testing to performance and security testing. Through case studies and analysis, the paper highlights both the benefits and challenges of automated testing in DevOps, and discusses future trends and advancements in the field

Безопасный конвейер доставки программного обеспечения

The presence of vulnerabilities in software is a pressing problem. Vulnerabilities can serve as a basis for breach of confidentiality and information leakage. The purpose of this study is to increase the level of software security at all stages of the life cycle from development and implementation to operation. Achieving this goal is possible through automated analysis of program code and increasing the types of vulnerabilities detected. The work proposes a secure software delivery pipeline that allows for static and dynamic analysis of program code, analysis of the search for vulnerabilities in third-party components and Docker images. The article reviewed popular software tools, their distinctive features, and provided justification for the choice of software solutions that form the basis of the developed secure delivery pipeline. The novelty of the work is the ability of the pipeline to automatically detect vulnerabilities at all stages of the software life cycle, from planning and design to testing, deployment and monitoring in a production environment, which allows you to eliminate vulnerabilities at an early stage, thereby increasing the level of software security. Conducted testing and approbation of a secure software delivery pipeline. Based on the assessment results, the developed secure software delivery pipeline showed that on average 98% of vulnerabilities were identified using the Semgrep tool, 90% of vulnerabilities using the OWASP ZAP tool, 96% of vulnerabilities using the Dependency-Track tool, and 88% using the Trivy tool. The results of the study and experimental data showed that on average, as a result of testing, the accuracy of detecting vulnerabilities is 93%. The practical value of the work lies in the fact that the developed secure software delivery pipeline can be used as a tool for detecting program code vulnerabilities by software development specialists, as well as information security specialists of IT companies. The results obtained can be used in the field of secure software development, formalization and interpretation of vulnerabilities in program code, which will make it possible to create new rules for their identification and development of countermeasures to neutralize them.

Measuring and improving software testability at the design level

ContextThe quality of software systems is significantly influenced by design testability, an aspect often overlooked during the initial phases of software development. The implementation may deviate from its design, resulting in decreased testability at the integration and unit levels. ObjectiveThe objective of this study is to automatically identify low-testable parts in object-orientated design and enhance them by refactoring to design patterns. The impact of various design metrics mainly coupling (e.g., fan-in and fan-out) and inheritance (e.g., depth of inheritance tree and number of subclasses) metrics on design testability is measured to select the most appropriate refactoring candidates. MethodThe methodology involves creating a machine learning model for design testability prediction using a large dataset of Java classes, followed by developing an automated refactoring tool. The design classes are vectorized by ten design metrics and labeled with testability scores calculated from a mathematical model. The model computes testability based on code coverage and test suite size of classes that have already been tested via automatic tools. A voting regressor model is trained to predict the design testability of any class diagram based on these design metrics. The proposed refactoring tool for dependency injection and factory method is applied to various open-source Java projects, and its impact on design testability is assessed. ResultsThe proposed design testability model demonstrates its effectiveness by satisfactorily predicting design testability, as indicated by a mean squared error of 0.04 and an R2 score of 0.53. The automated refactoring tool has been successfully evaluated on six open-source Java projects, revealing an enhancement in design testability by up to 19.11 %. ConclusionThe proposed automated approach offers software developers the means to continuously evaluate and enhance design testability throughout the entire software development life cycle, mitigating the risk of testability issues stemming from design-to-implementation discrepancies.

Aplikasi Presensi Pegawai dengan Metode Face Recognize dan Location-Based Service berbasis Android

Presence is a one of main thing for a State Civil Apparatus (ASN). However, in its implementation, the ASN attendance process currently still uses conventional methods and finger machines, which causes several problems, such as ineffectiveness, inefficiency, and vulnerability to fraud. This research is aimed to develop a presence application using Android-based face recognition and location-based service methods. This study type is research and development use the Software Development Life Cycle (SDLC) Spiral that focuses on paying attention to project risks. The liason or data collection stage used is a literature study by looking for relevant study, then direct observation in the field interviews with BKPSDM Bondowoso regarding presence issues, and a questionnaire to collect feedback from respondents as material for further application development, then the data collection results will be used to analyze needs, features and application specifications. The risk analysis stage aims to identify risks that may occur. The engineering stage of the application was built using the Flutter framework and RestfulAPI. The results of application testing state that the application can perform according to its functionality and needs. The study results is an Android application that aims to assist ASN in facilitating attendance via smartphones. According to a survey of 500 people, the application was positively received by Bondowoso County Government.

Sistem Pendukung Keputusan Cerdas untuk Pemilihan Jenis Tanaman Pertanian Kota

Urban farming activities have become increasingly popular to meet their food needs in urban areas. Jakarta as provinces with a population density of high, have a program of urban farming is developed by the farmers to urban Balkot Farm. This study aims to support system to develop a clever move the crop farm a town with the simple additive weighting (SAW). The methods used to obtain the highest related alternative plant assessed according to its parameters that affect the eligibility of land and a room with a variety of plants. The methodology used software development life cycle (SDLC) prototyping model consisting of five of the communication, quick plan, modeling quick design, construction of prototype deployment and delivery and feedback. Data collection method using interviews and the study of literature. Research results of a web application system that has an alternative menu, criteria, subcriteria, rating match and results. Smart decision support system based on black box testing and user acceptance testing successfully shows menus according to land criteria that will be used according to stakeholder needs.

Penerapan Metode Perbandingan Eksponensial dalam Menentukan Kinerja Perangkat Desa

Village apparatus is an important thing in the village for serving the community. However, carrying out the assessment process takes a long time and also requires determining which village officials are worthy of being given the best village officials. The aim of this research is to build a decision support system by applying the MPE method to determine the assessment of village officials. The model used to build this system is the Software Development Life Cycle with stages of planning, analysis, design, implementation, testing and management. This research was carried out at the Prapat Janji Village Office. The planning stage is carried out to obtain a performance assessment plan for village officials. Next, the analysis stage was carried out to obtain the system requirements that we developed using the MPE method. Next, the coding and testing stages carried out system creation and testing using a black box. The results of our findings are in the form of a decision support system to determine the best assessment of village officials. The test results show that this system is running well, and is in accordance with the design and model implemented. With this system, it can help the village in determining whether or not village officials will be given rewards.

Post-COVID-19 Software Development Life Cycle Method Analysis: A Literature Review

The evolution of Software Development Life Cycle (SDLC) methods post-COVID-19 has been critical in navigating the changing landscape of software development practices. This study conducted a comprehensive literature review to explain the adaptation and innovation of SDLC methods after the pandemic. It explores the importance of SDLC in information systems development and its role in promoting transparency, quality, and risk management. Leveraging a systematic literature review methodology, this study analyzes a series of studies published from 2021 to 2024, with a focus on SDLC models commonly used post-COVID-19. Despite potential bias in the selection of literature and limitations in time coverage, this study provides valuable insights into the most widely used uses of agile and scrum methodologies in various sectors, including business, education, government, finance, health, employment, and the food industry. This study underscores the importance of understanding the post-pandemic SDLC method landscape and its implications for software development practices. These findings are important for practitioners and researchers looking to navigate the dynamic environment of software development following the COVID-19 pandemic.

Comprehensive Examination of Risk Management Practices Throughout the Software Development Life Cycle (SDLC): A Systematic Literature Review

Risk management in the software development lifecycle (SDLC) is a continuous process that addresses risks throughout a system's lifecycle, including acquisition, development, maintenance, or operation. Despite its importance, ineffective risk management practices can lead to project failures, impacting organizations financially and reputationally. Therefore, there is a need for a systematic understanding of risk management practices in SDLC. This study conducts a Systematic Literature Review (SLR) related to risk management activities performed by previous research during the SDLC. The SLR method combines Kitchenham with the toll-gate method to select literature for use. This SLR aims to investigate activities in traditional waterfall and agile development processes, which will be mapped into risk management activities in SDLC according to ISO 16085:202. Additionally, the review highlights the challenges encountered in implementing risk management in the SDLC process, including project complexity, adherence to policies and standards, lack of communication, lack of resources, and organizational culture.

Application of Multimedia Learning for Pancasila and Citizenship Education in SD Inpres Waingapu 3

PPKn is an essential subject in elementary schools to instill Pancasila values and national identity. However, the results of the End-of-Semester Assessment (PAS) at SD Inpres Waingapu 3 consistently show low PPKn scores. To address this issue, this study developed a multimedia learning application for PPKn. This application is designed to enhance student understanding of PPKn material, particularly related to Pancasila values. The SDLC (Software Development Life Cycle) Waterfall method was used in the application's development. The application's effectiveness was tested through pre-test and post-test, showing a significant increase in the average score of 79.5%. The application's usability was also tested using the System Usability Scale (SUS), with an average score of 85 and a category of "Excellent". These results indicate that the PPKn multimedia learning application is effective and ready for use in elementary schools. hopefully this application can help improve the quality of PPKn learning and instill Pancasila values more strongly in students.

Sustaining Digital Assets Through Mobile Estate Planning

Many people own online accounts, with some having financial values like Internet banking, e-wallet and cryptocurrency. In the case of sudden death, their heirs are unaware of the digital assets possessed by the deceased person, which causes the assets to be lost forever, and the heirs might not receive the assets. If an estate plan did not account for digital assets properly, the beneficiaries would not be able to access them. Therefore, this paper addresses this issue by implementing a software development approach in designing a suitable model for sustaining digital assets through smartphones to allow the inheritance of digital assets to the heirs. The software development life cycle was adopted as the methodology to identify the model’s components through four phases: requirements analysis, system design, implementation and test and evaluation. First, this work proposed a model named Mobile Estate Planning for Digital Assets (MEPDA). Second, the study demonstrated the component of the model in a smartphone application, and finally, it was tested and evaluated through a usability study with a group of users. Most users suggested that MEPDA is useful and easy to use. Further, they were also satisfied with its functionalities and features. Mobile application for digital asset estate planning is necessary today due to the exponential increase of digital asset ownership with financial values. It could be one way of helping users to allow an efficient inheritance process for their heirs in the case of death.