Identificador persistente para citar o vincular este elemento:
http://hdl.handle.net/10662/20374
Títulos: | A Preventive Secure Software Development Model for a Software Factory: A Case Study |
Autores/as: | Sancho Núñez, José Carlos Caro Lindo, Andrés García Rodríguez, Pablo |
Palabras clave: | Cybersecurity;Software Development;Software Factory;Secure Software Development;Ciberseguridad;Desarrollo Software;Commercial experiment;Preventive model;Secure software development;Vulnerability reduction;Modelo preventivo;Reducción de la vulnerabilidad |
Fecha de publicación: | 2020 |
Editor/a: | Institute of Electrical and Electronics Engineers Inc. |
Resumen: | The number of cyberattacks has greatly increased in in the last years, as well as their sophistication and impact. For this reason, new emerging software development models are demanded, which help in developing secure by default software. To achieve this, the analysis and comparison in depth of the current models of secure software development is especially important. In this paper, a review of the most popular secure software models is presented, and a new secure software methodology is proposed, adapted to all current environments. A practical experiment in a software development company is tested, as a case study, considering data from real software projects. The results are presented and compared in two development scenarios: a classic one with a reactive security approach, and another one, emerging and preventive, that applies security by default in all phases of the software life cycle. In the case study, the total amount of vulnerabilities is reduced by 68,42%, decreasing their criticality and the temporal impact of their resolutions. In this way, software security and quality are methodologically improved with the proposed model, proving that the new emerging approach provides a more secure software. |
URI: | http://hdl.handle.net/10662/20374 |
ISSN: | 2169-3536 |
DOI: | 10.1109/ACCESS.2020.2989113 |
Colección: | DISIT - Artículos |
Archivos
Archivo | Descripción | Tamaño | Formato | |
---|---|---|---|---|
10_1109ACCESS_2020_2989113.pdf | 3,4 MB | Adobe PDF | Descargar |
Este elemento está sujeto a una licencia Licencia Creative Commons