Towards Agile Security Assurance
Fuente:
Zenodo
Gespeichert in:
| 1. Verfasser: | |
|---|---|
| Format: | Recurso digital |
| Veröffentlicht: |
Zenodo
2005
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866902037870936064 |
|---|---|
| author | Beznosov, Konstantin |
| author_facet | Beznosov, Konstantin |
| contents | Agile development methods are promising to become the next generation replacing water-fall development. They could eventually replace the plan-driven methodologies not only in pure software solutions in such benign domains as word processing and office automation but also in security-critical projects with both software and hardware parts developed or integrated together. At the same time, the accepted practices for security assurance appear to go totally contrary to agile approaches. Can and how security assurance be adopted by agile developers? What needs to be done for the adoption to happen? This paper makes a first step toward answering these questions in a pursuit for agile security assurance. It re-examines the conventional practices of security assurance to find out how well they suite agile development methodologies. It classifies security assurance methods and techniques with regards to their clash with agile development. For those in conflict, ways of alleviating it are suggested. |
| format | Recurso digital |
| id | zenodo_https___doi_org_10_5281_zenodo_3264215 |
| institution | Zenodo |
| language | |
| publishDate | 2005 |
| publisher | Zenodo |
| record_format | zenodo |
| spellingShingle | Towards Agile Security Assurance Beznosov, Konstantin agile methods eXtreme Programming XP security assurance engineering secure software Agile development methods are promising to become the next generation replacing water-fall development. They could eventually replace the plan-driven methodologies not only in pure software solutions in such benign domains as word processing and office automation but also in security-critical projects with both software and hardware parts developed or integrated together. At the same time, the accepted practices for security assurance appear to go totally contrary to agile approaches. Can and how security assurance be adopted by agile developers? What needs to be done for the adoption to happen? This paper makes a first step toward answering these questions in a pursuit for agile security assurance. It re-examines the conventional practices of security assurance to find out how well they suite agile development methodologies. It classifies security assurance methods and techniques with regards to their clash with agile development. For those in conflict, ways of alleviating it are suggested. |
| title | Towards Agile Security Assurance |
| topic | agile methods eXtreme Programming XP security assurance engineering secure software |
| url | https://doi.org/10.5281/zenodo.3264215 |