An Integrated Framework for Security Enhancement in Agile Development using Fuzzy Logic

Agile methods are widely employed to develop high-quality software, but theoretical analyses argue that agile methods are inadequate for security-critical projects. However, most agiledeveloped software today needs to satisfy baseline security requirements, so that we need to focus on how to achieve this level for typical agile projects. Software grows up through its life cycle, so software development methodologies should pay special attention to security aspects of the product. This paper addresses the major concern of security requirements of projects using an agile approach. It provides an integrated framework developed in Java which uses a lightweight method to enhance the security features by integrating security activities from Security engineering processes without compromising the agility in the agile approach.