Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
skip to main content
research-article

Understanding Software Security from Design to Deployment

Published: 03 May 2020 Publication History

Abstract

Analyzing, implementing and maintaining security requirements of software-intensive systems and achieving truly secure software requires planning for security from ground up, and continuously assuring that security is maintained across the software's lifecycle and even after deployment when software evolves. Given the increasing complexity of software systems, new application domains, dynamic and often critical operating conditions, the distributed nature of many software systems, and fast moving markets which put pressure on software vendors, building secure systems from ground up becomes even more challenging. Security-related issues have previously been targeted in software engineering sub-communities and venues. In the second edition of the International Workshop on Security from Design to Deployment (SEAD) at the International Conference on Automated Software Engineering (ASE) 2020, we aimed to bring the research and practitioner communities of requirements engineers, security experts, architects, developers, and testers together to identify foundations, and challenges, and to formulate solutions related to automating the analysis, design, implementation, testing, and maintenance of secure software systems.

References

[1]
J. Santos et al., "Understanding Software Vulnerabilities Related to Architectural Security Tactics: An Empirical Investigation of Chromium, PHP and Thunderbird", IEEE International Conference on Software Architecture (ICSA) 2017.
[2]
J. Santos et al., "A Catalog of Security Architecture Weaknesses", IEEE International Conference on Software Architecture Workshops (ICSAW) 2017.

Cited By

View all
  • (2024)ROLE, PROBLEMS, AND METHODS OF SOFTWARE SECURITY TESTING AUTOMATIONComputer systems and network10.23939/csn2024.02.1316:2(131-141)Online publication date: Dec-2024
  • (2024)Tools for Requirements EngineeringIEEE Software10.1109/MS.2024.338546641:4(30-37)Online publication date: 4-Jun-2024
  • (2023)Improving the Safety and Security of Software Systems by Mediating SAP VerificationApplied Sciences10.3390/app1301064713:1(647)Online publication date: 3-Jan-2023
  • Show More Cited By

Recommendations

Comments

Information & Contributors

Information

Published In

cover image ACM SIGSOFT Software Engineering Notes
ACM SIGSOFT Software Engineering Notes  Volume 45, Issue 2
April 2020
25 pages
ISSN:0163-5948
DOI:10.1145/3385678
Issue’s Table of Contents
Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 03 May 2020
Published in SIGSOFT Volume 45, Issue 2

Check for updates

Author Tags

  1. architecture
  2. ase
  3. deployment
  4. design
  5. requirements
  6. software security
  7. workshop

Qualifiers

  • Research-article

Contributors

Other Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

  • Downloads (Last 12 months)50
  • Downloads (Last 6 weeks)1
Reflects downloads up to 01 Feb 2025

Other Metrics

Citations

Cited By

View all
  • (2024)ROLE, PROBLEMS, AND METHODS OF SOFTWARE SECURITY TESTING AUTOMATIONComputer systems and network10.23939/csn2024.02.1316:2(131-141)Online publication date: Dec-2024
  • (2024)Tools for Requirements EngineeringIEEE Software10.1109/MS.2024.338546641:4(30-37)Online publication date: 4-Jun-2024
  • (2023)Improving the Safety and Security of Software Systems by Mediating SAP VerificationApplied Sciences10.3390/app1301064713:1(647)Online publication date: 3-Jan-2023
  • (2023)UMLsecRT: Reactive Security Monitoring of Java Applications With Round-Trip EngineeringIEEE Transactions on Software Engineering10.1109/TSE.2023.332636650:1(16-47)Online publication date: 23-Oct-2023
  • (2022)Understanding the Cyber-Physical System in International Stadiums for Security in the Network from Cyber-Attacks and Adversaries using AIWireless Personal Communications: An International Journal10.1007/s11277-021-08573-2127:2(1207-1224)Online publication date: 1-Nov-2022
  • (2021)Automatically Identifying Bug Reports with Tactical Vulnerabilities by Deep Feature Learning2021 IEEE 32nd International Symposium on Software Reliability Engineering (ISSRE)10.1109/ISSRE52982.2021.00043(333-344)Online publication date: Oct-2021
  • (2021)Combinatorially XSSing Web Application Firewalls2021 IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW)10.1109/ICSTW52544.2021.00026(85-94)Online publication date: Apr-2021
  • (2021)Why Don't Developers Detect Improper Input Validation?'Proceedings of the 43rd International Conference on Software Engineering10.1109/ICSE43902.2021.00054(499-511)Online publication date: 22-May-2021

View Options

Login options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Figures

Tables

Media

Share

Share

Share this Publication link

Share on social media