Security-aware software development life Cycle (SaSDLC) - Processes and tools

2009 IFIP International Conference on Wireless and Optical Communications Networks, WOCN 2009

Volumn , Issue , 2009, Pages

  Talukder, Asoke K ^a   Maurya, V K ^a   Babu G, Santhosh ^a   Ebenezer, Jangam ^a   Sekhar V, Muni ^a   Jevitha, K P ^a   Samanta, Saurabh ^a   Pais, Alwyn Roshan ^a  

^a NATIONAL INSTITUTE OF TECHNOLOGY KARNATAKA   (India)

Author keywords

SaSDL; Secure software engineering; Security designers' Workbench; Security testers' Workbench; Security aware software; Securityaware software development life cycle

Indexed keywords

SASDL; SECURE SOFTWARE ENGINEERING; SECURITY DESIGNERS' WORKBENCH; SECURITY TESTERS' WORKBENCH; SECURITY-AWARE SOFTWARE; SECURITYAWARE SOFTWARE DEVELOPMENT LIFE CYCLE;

LIFE CYCLE; OPTICAL COMMUNICATION; PHOTONICS; SOFTWARE DESIGN; WIRELESS NETWORKS;

COMPUTER SOFTWARE;

EID: 70349294308     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/WOCN.2009.5010550     Document Type: Conference Paper

References (15)

1. P. Naur and B. Randell, (Eds.). Software Engineering: Report of a conference sponsored by the NATO Science Committee, Garmisch, Germany, 7-11 Oct. 1968, Brussels, Scientific Affairs Division, NATO (1969) 231pp.
2. Asoke K Talukder and Manish Chaitanya, Architecting Secure Software Systems, Auerbach Publications, 2008.
3. Shawn Hernan, Scott Lambert, Tomasz Ostwald, Adam Shostack, "Uncover Security Design Flaws using The STRIDE Approach" msdn.microsoft.com, Nov. 2006. [Online]. Available: http://msdn.microsoft.com/enus/magazine/cc163519. aspx. [Accessed: July 21, 2008].
4. F. Swiderski and W. Snyder, Threat Modeling. Washington: Microsoft Press, 2004.
5. Bruce Schneir, "Modeling Security Threats", December 1999. [Online]. Available: http://www.schneier.com/paperattacktrees-ddj-ft.html [Accessed: Aug. 17, 2008].
6. Fredrik Moberg, "Security Analysis of an Information System using an Attack tree-based Methodology, " Master's Thesis, Chalmers University of Technology, Goteborg, Sweden, 2000.
7. Mamadou H. Diallo, Jose Romero-Mariona, Susan Elliott Sim and Debra J. Richardson, "A Comparative Evaluation of Three Approaches to Specifying Security Requirements, " presented at 12th Working Conference on Requirements Engineering: Foundation for Software Quality, Luxembourg, 2006.
8. Guttorm Sindre and Andreas L Opdahl, "Capturing Security Requirements by Misuse Cases, " in Proc. 14th Norwegian Informatics Conference (NIK'2001), Troms, Norway, Nov. 2001.
9. G. Sindre and A.L. Opdahl, "Eliciting Security Requirements by Misuse Cases, " in Proc. 37th Conf. Techniques of Object-Oriented Languages and Systems, TOOLS Pacific 2000, 2000, pp. 120-131.
10. G. Sindre and A.L. Opdahl, "Eliciting security requirements with misuse cases, " Requirements Engineering, Vol.10, No.1, pp. 34-44, Jan.2005.
11. J.D. Meier, et al., "Improving Web Application Security: Threats and Countermeasures, " msdn.microsoft.com, June 2003.[Online].Available: www.msdn.microsoft.com/enus/library/aa302419.aspx [Accessed: July.29, 2008].
12. Joseph W. Yoder and Jeffrey Barcalow, "Architectural Patterns for Enabling Application Security, " in Proc.4th Conference on Patterns Languages of Programs (PLoP '97) Monticello, Illinois, Sept.1997.
13. Guttorm Sindre and Andreas L. Opdahl, "Templates for Misuse Case Description, " in Proceedings of the 7 th International Workshop on Requirements Engineering, Foundation for Software Quality (REFSQ'2001), Interlaken, Switzerland, June 2001.
14. Security tools [Online]. Available: www.insecure.org.
15. Clayton, R. (2007) 'Hacking tools guidance finally appear, http://www.lightbluetouchpaper.org/2007/12/31/hackingtool-guidance-finally- appears/.