
A Secure Software Specification Development Strategy for Enterprises : A Case Study Approach
Author(s) -
Sifat Ali Sathio,
Isma Farah Siddiqui,
Qasim Ali Arain
Publication year - 2021
Publication title -
international journal of scientific research in computer science, engineering and information technology
Language(s) - English
Resource type - Journals
ISSN - 2456-3307
DOI - 10.32628/cseit217155
Subject(s) - systems development life cycle , computer science , software development , software security assurance , software development process , software engineering , secure coding , social software engineering , security engineering , security bug , computer security , software construction , process management , software , engineering , information security , security service , operating system
Although Security is a non-functional requirement, it is a very essential requirement for software systems, to achieve secure software specification development for enterprises we need to find and fix vulnerabilities in the early phase of SDLC. For the successful achievement of secure software specification development in the software enterprise, the security of software application plays a very vital role. During the software development lifecycle, improper security can lead to thoughtful and serious consequences in any enterprise. In this paper, the case study approach is followed regarding the achievement of a secure web application, finding and fixing vulnerabilities in the early software development lifecycle, and applying the re-engineering process on a developed web application using the best security assessment model considering the literature review. Also, validation of the developed application is done with the help of Penetration testing.