Towards a Secure Agile Software Development Process

摘要

Agile methodologies such as scrum and Extreme Programming (XP) are efficient development processes by accepting changes at any phase and delivering software quickly to customers. However, these methodologies have been criticized because of the unavailability of security as an important quality goal of software systems. Although, there are pre-existing research results on this topic, there is no established approach for identifying security challenges of agile practices. Specifically, we analyze agile practices to find the security challenges in customer-and developer activities during software development. Identifying these challenges helps the secure development of software using agile practices. Our case study based results show that a number of developer-and customer activities result in security flaws and vulnerabilities for the software.