Integration of Software Security Design Analysis to the Agile Development Process / Integracija bezbednosne analize dizajna softverau proces agilnog razvoja

Description

<p>This thesis presents research in the field of secure<br />software engineering. Two methods are<br />developed that, when combined, facilitate the<br />integration of software security design analysis<br />into the agile development workflow. The first<br />method is a training framework for creating<br />workshops aimed at teaching software engineers<br />on how to perform security design analysis. The<br />second method is a process that expands on the<br />security design analysis method to facilitate better<br />integration with the needs of the organization. The<br />first method is evaluated through a controlled<br />experiment, while the second method is evaluated<br />through comparative analysis and case study<br />analysis, where the process is tailored and<br />implemented for two different software vendors.</p> / <p>U sklopu disertacije izvr&scaron;eno je istraživanje u<br />oblasti razvoja bezbednog softvera. Razvijene su<br />dve metode koje zajedno omogućuju integraciju<br />bezbednosne analize dizajna softvera u proces<br />agilnog razvoja. Prvi metod predstavlja radni okvir<br />za konstruisanje radionica čija svrha je obuka<br />inženjera softvera kako da sprovode bezbednosnu<br />analizu dizajna. Drugi metod je proces koji<br />pro&scaron;iruje metod bezbednosne analize dizajna<br />kako bi podržao bolju integraciju spram potreba<br />organizacije. Prvi metod je evaluiran kroz<br />kontrolisan eksperiment, dok je drugi metod<br />evaluiran upotrebom komparativne analize i<br />analize studija slučaja, gde je proces<br />implementiran u kontekstu dve organizacije koje<br />se bave razvojem softvera.</p>

Links & Downloads

1. https://www.cris.uns.ac.rs/DownloadFileServlet/Disertacija15711168256205.pdf?controlNumber=(BISIS)111796&fileName=15711168256205.pdf&id=13797&source=NDLTD&language=en
2. https://www.cris.uns.ac.rs/record.jsf?recordId=111796&source=NDLTD&language=en

Tags

Additional Fields

Identifer	oai:union.ndltd.org:uns.ac.rs/oai:CRISUNS:(BISIS)111796
Date	18 January 2020
Creators	Luburić Nikola
Contributors	Sladić Goran, Milosavljević Branko, Gilezan Silvia, Milosavljević Gordana, Stanisavljević Žarko
Publisher	Univerzitet u Novom Sadu, Fakultet tehničkih nauka u Novom Sadu, University of Novi Sad, Faculty of Technical Sciences at Novi Sad
Source Sets	University of Novi Sad
Language	English
Detected Language	English
Type	PhD thesis