Embedding security in Software Development Life Cycle (SDLC)

摘要

Users that expects greater reliability, security and ease of use demands a better software. With the advancement of new technologies brings along higher expectations from the software. The users want to access a software, which is bug free with ease of use. To achieve this, a structured framework or well-defined life cycle should be considered. Life cycle should not only tell what functions it need to perform, but it should provide high-level security. Objective of this paper is to merge traditional SDLC (Software Development Life Cycle) with risk and security properties into one life cycle. As in traditional SDLC, security testing is done at the end but it should consider security and risk factors at each stage to prevent major bugs at the later stages.