Adopting Knowledge Based Security System for Software Development Life Cycle
نویسنده
چکیده
The high-demand from the software industry led to the development of many Software Development Life Cycle (SDLC) models that help produce high quality software within budget and time constraints. Most of these SDLC models do not completely cover security as early as possible in the development cycle. Since security is a major concern to the users and the developers, adopting it at the early stages of the SDLC could help to ensure integrity, accessibility and confidentiality in future systems. It is still unclear how to achieve a perfectly secured software system by modifying the SDLC models. In this paper, the Knowledge Based Security System (KBSS) model is proposed to help in modeling and specifying security at all stages of SDLC in an effort to achieve a maximally secured software system. KBSS is a system that categorizes, clusters, monitors, alerts, and controls the Security Knowledge Management by the knowledge of the Security Expert Team, who are able to identify, collect, organize, manage, retrieve, provide and store all aspects of security functions and issues.
منابع مشابه
Mapping of McGraw Cycle to RUP Methodology for Secure Software Developing
Designing a secure software is one of the major phases in developing a robust software. The McGraw life cycle, as one of the well-known software security development approaches, implements different touch points as a collection of software security practices. Each touch point includes explicit instructions for applying security in terms of design, coding, measurement, and maintenance of softwar...
متن کاملDevelopment of decision support tool for municipal solid waste management system in Iran based on life cycle assessment approach
Background and Objective: Various aspects including the environmental burdens, social and economic consequences of the waste management(WM) scenarios must be considered to come up with a comprehensive WM plan. Life Cycle Assessment (LCA) approach is a systematic method to quantify the environmental burdens of each WM scenario. Materials and Methods: This study used an LCA approach to develop a...
متن کاملQuantitative evaluation of software security: an approach based on UML/SecAM and evidence theory
Quantitative and model-based prediction of security in the architecture design stage facilitates early detection of design faults hence reducing modification costs in subsequent stages of software life cycle. However, an important question arises with respect to the accuracy of input parameters. In practice, security parameters can rarely be estimated accurately due to the lack of sufficient kn...
متن کاملSecurity Policy Development: Towards a Life-Cycle and Logic-Based Verification Model
Although security plays a major role in the design of software systems, security requirements and policies are usually added to an already existing system, not created in conjunction with the product. As a result, there are often numerous problems with the overall design. In this paper, we discuss the relationship between software engineering, security engineering, and policy engineering and pr...
متن کاملPredictive Models for Identifying Software Components Prone to Failure During Security Attacks
Sometimes software security engineers are given a product that they not familiar with, but are asked to have a security analysis done for it in a relatively short time. An early knowledge of where the most vulnerable regions of a software-based system are likely to reside can help prioritize their efforts. In general, software metrics can be used to predict faultand failure-prone components for...
متن کامل