A Secure Software Specification Development Strategy for Enterprises : A Case Study Approach-Reference-Cited by-同舟云学术

A Secure Software Specification Development Strategy for Enterprises : A Case Study Approach

Published:2021-02-20 Issue: Volume: Page:260-266
ISSN:2456-3307
Container-title:International Journal of Scientific Research in Computer Science, Engineering and Information Technology
language:en
Short-container-title:IJSRCSEIT

Author:

Sathio Sifat Ali¹,Farah Siddiqui Isma²,Arain Qasim Ali³

Affiliation:

1. Department of Software Engineering, Institute of Information and Communication Technology, Mehran University of Engineering and Technology, Jamshoro, Pakistan

2. Associate Professor, Department of Software Engineering, Mehran University of Engineering and Technology, Jamshoro, Pakistan

3. Associate Professor, Department of Software Engineering, Mehran University of Engineering and Technology, Jamshoro, Pakistan

Abstract

Although Security is a non-functional requirement, it is a very essential requirement for software systems, to achieve secure software specification development for enterprises we need to find and fix vulnerabilities in the early phase of SDLC. For the successful achievement of secure software specification development in the software enterprise, the security of software application plays a very vital role. During the software development lifecycle, improper security can lead to thoughtful and serious consequences in any enterprise. In this paper, the case study approach is followed regarding the achievement of a secure web application, finding and fixing vulnerabilities in the early software development lifecycle, and applying the re-engineering process on a developed web application using the best security assessment model considering the literature review. Also, validation of the developed application is done with the help of Penetration testing.

Publisher

Technoscience Academy

Subject

General Medicine

Reference11 articles.

1. Mamdouh Alenezi, Amir Shahab, Muhammad Nadeem & Raja Asif Wagan (2020). An automated approach to fix buffer overflows. Int J Elec & Comp Eng, Vol. 10, No. 4.

2. Qian, K., Parizi, R. M., & Lo, D. (2018, December). OWASP Risk Analysis Driven Security Requirements Specification for Secure Android Mobile Software Development. In 2018 IEEE Conference on Dependable and Secure Computing (DSC) (pp. 1-2). IEEE.

3. Khan, M. U. A., & Zulkernine, M. (2008, July). Quantifying security in secure software development phases. In 2008 32nd Annual IEEE International Computer Software and Applications Conference (pp. 955-960). IEEE.

4. Karim, N. S. A., Albuolayan, A., Saba, T., & Rehman, A. (2016). The practice of secure software development in SDLC: an investigation through existing model and a case study. Security and Communication Networks, 9(18), 5333-5345.

5. Chung, L., Nixon, B. A., Yu, E., &Mylopoulos, J. (2012). Non-functional requirements in software engineering (Vol. 5). Springer Science & Business Media.