Systematic Mapping of the Literature on Secure Software Development

Hernan Nina, Jose Antonio Pow-Sang, Monica Villavicencio

Research output: Contribution to journalArticlepeer-review

17 Scopus citations

Abstract

The accelerated growth in exploiting vulnerabilities due to errors or failures in the software development process is a latent concern in the Software Industry. In this sense, this study aims to provide an overview of the Secure Software Development trends to help identify topics that have been extensively studied and those that still need to be. Therefore, in this paper, a systematic mapping review with PICo search strategies was conducted. A total of 867 papers were identified, of which only 528 papers were selected for this review. The main findings correspond to the Software Requirements Security, where the Elicitation and Misuse Cases reported more frequently. In Software Design Security, recurring themes are security in component-based software development, threat model, and security patterns. In the Software Construction Security, the most frequent topics are static code analysis and vulnerability detection. Finally, in Software Testing Security, the most frequent topics are vulnerability scanning and penetration testing. In conclusion, there is a diversity of methodologies, models, and tools with specific objectives in each secure software development stage.

Original languageEnglish
Article number9363884
Pages (from-to)36852-36867
Number of pages16
JournalIEEE Access
Volume9
DOIs
StatePublished - 9 Mar 2021

Keywords

  • Software development
  • construction
  • design
  • requirements
  • security
  • systematic mapping review
  • testing
  • vulnerability

Fingerprint

Dive into the research topics of 'Systematic Mapping of the Literature on Secure Software Development'. Together they form a unique fingerprint.

Cite this