AN INTEGRATED RISK ANALYSIS FRAMEWORK FOR IMPROVING SECURITY OF SOFTWARE DEVELOPMENT LIFE CYCLE

摘要

Software development life cycle (SDLC) plays an essential role in most software construction projects. Unfortunately, the system users or developers are rarely concerned with the security requirements for these processes. Even though some researchers have attempted to investigate specific methodologies in the area of secure software engineering, there are still few frameworks that can address the security issues. The primary objective of this research is to design a unified framework of architectural risk analysis to fulfill the security requirements. The proposed framework can help system users to: 1) systematically handle breach issues that exist in software architecture, 2) fulfill security requirements in information security management, and 3) handle benchmark issues in risk assessment.