SwePub - sökning: L773:1947 3036 OR L773:1947 30...

Numrering	Referens	Omslagsbild	Hitta
1.	Boldt, Martin, et al. (författare) Introducing a Novel Security-Enhanced Agile Software Development Process 2017 Ingår i: International Journal of Secure Software Engineering. - : IGI Global. - 1947-3036 .- 1947-3044. ; 8:2 Tidskriftsartikel (refereegranskat)abstract In this paper, a novel security-enhanced agile software development process, SEAP, is introduced. It has been designed, tested, and implemented at Ericsson AB, specifically in the development of a mobile money transfer system. Two important features of SEAP are 1) that it includes additional security competences, and 2) that it includes the continuous conduction of an integrated risk analysis for identifying potential threats. As a general finding of implementing SEAP in software development, the developers solve a large proportion of the risks in a timely, yet cost-efficient manner. The default agile software development process at Ericsson AB, i.e. where SEAP was not included, required significantly more employee hours spent for every risk identified compared to when integrating SEAP. The default development process left 50.0% of the risks unattended in the software version that was released, while the application of SEAP reduced that figure to 22.5%. Furthermore, SEAP increased the proportion of risks that were corrected from 12.5% to 67.9%, a more than five times increment.

Boldt, Martin, et al. (författare)
Introducing a Novel Security-Enhanced Agile Software Development Process
2017
Ingår i: International Journal of Secure Software Engineering. - : IGI Global. - 1947-3036 .- 1947-3044. ; 8:2
Tidskriftsartikel (refereegranskat)abstract
- In this paper, a novel security-enhanced agile software development process, SEAP, is introduced. It has been designed, tested, and implemented at Ericsson AB, specifically in the development of a mobile money transfer system. Two important features of SEAP are 1) that it includes additional security competences, and 2) that it includes the continuous conduction of an integrated risk analysis for identifying potential threats. As a general finding of implementing SEAP in software development, the developers solve a large proportion of the risks in a timely, yet cost-efficient manner. The default agile software development process at Ericsson AB, i.e. where SEAP was not included, required significantly more employee hours spent for every risk identified compared to when integrating SEAP. The default development process left 50.0% of the risks unattended in the software version that was released, while the application of SEAP reduced that figure to 22.5%. Furthermore, SEAP increased the proportion of risks that were corrected from 12.5% to 67.9%, a more than five times increment.

Träfflista för sökning "L773:1947 3036 OR L773:1947 3044 "