Agile security issues: a research study

Alnatheer, Ahmed, Gravell, Andrew and Argles, David (2010) Agile security issues: a research study. 4th International Symposium on Empirical Software Engineering and Measurement, Bolzano - Bozen, Italy. 15 - 16 Sep 2010. pp. 1-11 .

Abstract

In this doctoral research review we present an ongoing empirical study on the effects of using predominant security issues for integration into agile methodologies. As part of this study, current security issues related to and applicable to popular agile methodologies such as Scrum, XP, and FDD and their effects are researched, quantified, analyzed, discussed and summarized in order to gain a more practical and deeper understanding of the effectiveness of the issues and methods proposed or in use in the field today. The purpose of this paper is to present a review to the ongoing doctoral research effort and to present our research deign and planned next steps. The identified issues which are important factors in our research are presented along with our forthcoming analysis which underscores the gap in the literature in the past few years on the topic. Specifically, in terms of empirical evaluation of the issues, the contribution of this paper is to fill the gap that was identified through the evaluation of the security issues and contributions in last few years. We have also identified research questions that aim to address issues based on the predominant opinions of the people currently in practice. Additionally, we have come up with ways to answer significant questions in order to find out what are the most important issues and solutions that can be used in practice with a high degree of consensus. The analysis includes experiments, semi-structured interviews, and a new type of survey that seeks to gather more relevant and specific objective and subjective information about projects and experiments in order to arrive at a consensus on which solutions need to be included or emphasized as part of agile to provide adequate security assurance.

This record has no associated files available for download.

Contributors

Download statistics