| Naslov: | Agile development of secure software for small and medium-sized enterprises |
|---|
| Avtorji: | ID Mihelič, Anže (Avtor)
ID Vrhovec, Simon (Avtor)
ID Hovelja, Tomaž (Avtor) |
|---|
| Datoteke: |  https://www.mdpi.com/2071-1050/15/1/801
 sustainability-15-00801.pdf (2,58 MB)
MD5: 9AAB505D482F45BA0A3DB1AC39B6689E
https://www.mdpi.com/2071-1050/15/1/801/pdf
|
|---|
| Jezik: | Angleški jezik |
|---|
| Vrsta gradiva: | Znanstveno delo |
|---|
| Tipologija: | 1.01 - Izvirni znanstveni članek |
|---|
| Organizacija: | FVV - Fakulteta za varnostne vede
|
|---|
| Opis: | Although agile methods gained popularity and became globally widespread, developing secure software with agile methods remains a challenge. Method elements (i.e., roles, activities, and artifacts) that aim to increase software security on one hand can reduce the characteristic agility of agile methods on the other. The overall aim of this paper is to provide small- and medium-sized enterprises (SMEs) with the means to improve the sustainability of their software development process in terms of software security despite their limitations, such as low capacity and/or financial resources. Although software engineering literature offers various security elements, there is one key research gap that hinders the ability to provide such means. It remains unclear not only how much individual security elements contribute to software security but also how they impact the agility and costs of software development. To address the gap, we identified security elements found in the literature and evaluated them for their impact on software security, agility, and costs in an international study among practitioners. Finally, we developed a novel lightweight approach for evaluating agile methods from a security perspective. The developed approach can help SMEs to adapt their software development to their needs. |
|---|
| Ključne besede: | secure software development, security engineering, agile, small and medium sized enterprises, software development management, security |
|---|
| Status publikacije: | Objavljeno |
|---|
| Verzija publikacije: | Objavljena publikacija |
|---|
| Datum sprejetja članka: | 29.12.2022 |
|---|
| Datum objave: | 02.01.2023 |
|---|
| Leto izida: | 2023 |
|---|
| Št. strani: | str. 1-23 |
|---|
| Številčenje: | Vol. 15, iss. 1 |
|---|
| PID: | 20.500.12556/DKUM-86420  |
|---|
| UDK: | 004 |
|---|
| eISSN: | 2071-1050 |
|---|
| COBISS.SI-ID: | 135844867 |
|---|
| DOI: | 10.3390/su15010801 |
|---|
| ISSN pri članku: | 2071-1050 |
|---|
| Datum objave v DKUM: | 29.11.2023 |
|---|
| Število ogledov: | 494 |
|---|
| Število prenosov: | 7 |
|---|
| Metapodatki: |    |
|---|
| Področja: | Ostalo
|
|---|
|
:
|
Kopiraj citat |
|---|
| | | | Skupna ocena: | (0 glasov) |
|---|
| Vaša ocena: | Ocenjevanje je dovoljeno samo prijavljenim uporabnikom. |
|---|
| Objavi na: |  |
|---|
Postavite miškin kazalec na naslov za izpis povzetka. Klik na naslov izpiše
podrobnosti ali sproži prenos. |
