Systematic Mapping of the Literature on Secure Software Development

Hernan Nina, Jose Antonio Pow-Sang, Monica Villavicencio

Producción científica: Contribución a una revistaArtículorevisión exhaustiva

17 Citas (Scopus)

Resumen

The accelerated growth in exploiting vulnerabilities due to errors or failures in the software development process is a latent concern in the Software Industry. In this sense, this study aims to provide an overview of the Secure Software Development trends to help identify topics that have been extensively studied and those that still need to be. Therefore, in this paper, a systematic mapping review with PICo search strategies was conducted. A total of 867 papers were identified, of which only 528 papers were selected for this review. The main findings correspond to the Software Requirements Security, where the Elicitation and Misuse Cases reported more frequently. In Software Design Security, recurring themes are security in component-based software development, threat model, and security patterns. In the Software Construction Security, the most frequent topics are static code analysis and vulnerability detection. Finally, in Software Testing Security, the most frequent topics are vulnerability scanning and penetration testing. In conclusion, there is a diversity of methodologies, models, and tools with specific objectives in each secure software development stage.

Idioma originalInglés
Número de artículo9363884
Páginas (desde-hasta)36852-36867
Número de páginas16
PublicaciónIEEE Access
Volumen9
DOI
EstadoPublicada - 9 mar. 2021

Huella

Profundice en los temas de investigación de 'Systematic Mapping of the Literature on Secure Software Development'. En conjunto forman una huella única.

Citar esto