arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2012.10881cs.SE
收藏

以软件、攻击者和资产为中心的方法来提高系统开发过程中的安全性

Software, Attacker and Asset-centric Approach for Improving Security in System Development Process

Abdul Hadi bin Abdul Rahman, Abdullah Nazir, Kim Tae Hyun, Tan Horng Yarng, Fatima-tuz-Zahra

摘要:

安全开发过程是开发人员采取的一个程序,以确保开发的程序遵循一般的安全标准,并将始终保持最新,以便结果得到很好的保护和服从。作为软件开发人员,为客户和用户实现和开发高度安全和可靠的程序是非常重要的。在当前的数字世界中,一切都比我们想象的更快,大多数旧的安全策略不再能够单独实施。如果软件应用程序没有按照现代趋势进行安全保护,可能会给公司带来巨大的后果和影响。因此,本文对软件开发过程中的安全集成进行了研究。这项研究的概念和目的是提供有关当前的问题和面临的大多数软件开发人员在安全的软件开发方面的挑战的见解。通过更好和更清晰地解释这些问题,讨论了克服这些问题的挑战和方法,这些方法可以提供更好和更高级别的安全性,以及更好的软件程序员和客户关系。为了满足未来的需求和威胁,在开发软件系统的所有阶段都需要考虑安全问题。因此,通过本文的努力,调查和贡献这一领域。

英文摘要:

Secure development process is a procedure taken by developers to ensure the programs developed are following the general security standards and will always be up to date so that the outcomes are well secured and obedient. As a software developer, it is very crucial to implement and develop a highly secured and reliable program for clients and users. In this current digital world where everything is advancing faster than we can ever think of, most of the old security policies can no longer be implemented alone. The consequences and impacts that could be brought upon a company are really huge if the software applications are not secured according to the modern trend. Therefore, in this paper research is done to asses the security integration in software development process. The concept and the purpose of this research is to provide insight about the current issues and challenges faced by most of the software developers in terms of secure software development. With a better and clearer explanation of these issues, challenges, and methodologies adopted to overcome them are discussed which can potentially provide a better and higher level of security along with better software programmers and client relationship. To comply with future demands and threats, security concerns need to be involved in all phases while developing a software system. Therefore, an effort is made to investigate and contribute to this domain through this paper.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑