Trustworthy Software Development-Practical view of security processes through MVP methodology

Chen Shiang-Jiun; Pan Yu-Chun; Ma Yi-Wei; Chiang Cheng-Mou; Tsai Chi-Chin

doi:10.23919/ICACT53585.2022.9728811

Trustworthy Software Development-Practical view of security processes through MVP methodology

Chen Shiang-Jiun
, Pan Yu-Chun
, Ma Yi-Wei
, Chiang Cheng-Mou
, Tsai Chi-Chin

Department of Computer Science and Information Engineering

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

2 Scopus citations

Abstract

With the popularization of 5G, one of its characteristics supports a large amount of IoT devices and a lot of open sources will be introduced. Therefore, trustworthiness has become more important for users and developers. According to IBM Systems Sciences Institute, we understand that taking software security into consideration in the early stages of development will save 99% cost. Therefore, security by design can not only save development costs but also improve the overall security of the software.In this paper, we mainly focus on the trustworthiness aspect in the software development process based on ISO/IEC/IEEE15288, NIST800-160, DoD Enterprise DevSecOps Reference, and A Guide to the Project Management Body of Knowledge (PMBOK Guide)-Seventh Edition and the Standard for Project Management concept. A trustworthiness framework will be proposed to make software more reliable and trustworthy for users and allows enterprises and developers to control and test the trustworthiness of production. After that, the analysis of software security is provided. This platform will provide the guidance for industries easier to use and apply to their product.

Original language	English
Title of host publication	24th International Conference on Advanced Communication Technology
Subtitle of host publication	Artificial Intelligence Technologies toward Cybersecurity!!, ICACT 2022 - Proceedings
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	412-416
Number of pages	5
ISBN (Electronic)	9791188428090
DOIs	https://doi.org/10.23919/ICACT53585.2022.9728811
State	Published - 2022
Event	24th International Conference on Advanced Communication Technology, ICACT 2022 - Virtual, Online, Korea, Republic of Duration: 13 Feb 2022 → 16 Feb 2022

Publication series

Name	International Conference on Advanced Communication Technology, ICACT
Volume	2022-February
ISSN (Print)	1738-9445

Conference

Conference	24th International Conference on Advanced Communication Technology, ICACT 2022
Country/Territory	Korea, Republic of
City	Virtual, Online
Period	13/02/22 → 16/02/22

Bibliographical note

Publisher Copyright:
© 2022 Global IT Research Institute-GiRI.

Keywords

DevSecOps
National Institute of Standards and Technology (NIST)
National Vulnerability Database
Open Web Application Security Project (OWASP)
Security by Design
security development lifecycle
trustworthiness
V Model
vulnerability

Access to Document

10.23919/ICACT53585.2022.9728811

Cite this

Shiang-Jiun, C., Yu-Chun, P., Yi-Wei, M., Cheng-Mou, C., & Chi-Chin, T. (2022). Trustworthy Software Development-Practical view of security processes through MVP methodology. In 24th International Conference on Advanced Communication Technology: Artificial Intelligence Technologies toward Cybersecurity!!, ICACT 2022 - Proceedings (pp. 412-416). (International Conference on Advanced Communication Technology, ICACT; Vol. 2022-February). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.23919/ICACT53585.2022.9728811

Shiang-Jiun, Chen ; Yu-Chun, Pan ; Yi-Wei, Ma et al. / Trustworthy Software Development-Practical view of security processes through MVP methodology. 24th International Conference on Advanced Communication Technology: Artificial Intelligence Technologies toward Cybersecurity!!, ICACT 2022 - Proceedings. Institute of Electrical and Electronics Engineers Inc., 2022. pp. 412-416 (International Conference on Advanced Communication Technology, ICACT).

@inproceedings{1831193a7bf24aa6b1a1c1a85daae384,

title = "Trustworthy Software Development-Practical view of security processes through MVP methodology",

abstract = "With the popularization of 5G, one of its characteristics supports a large amount of IoT devices and a lot of open sources will be introduced. Therefore, trustworthiness has become more important for users and developers. According to IBM Systems Sciences Institute, we understand that taking software security into consideration in the early stages of development will save 99\% cost. Therefore, security by design can not only save development costs but also improve the overall security of the software.In this paper, we mainly focus on the trustworthiness aspect in the software development process based on ISO/IEC/IEEE15288, NIST800-160, DoD Enterprise DevSecOps Reference, and A Guide to the Project Management Body of Knowledge (PMBOK Guide)-Seventh Edition and the Standard for Project Management concept. A trustworthiness framework will be proposed to make software more reliable and trustworthy for users and allows enterprises and developers to control and test the trustworthiness of production. After that, the analysis of software security is provided. This platform will provide the guidance for industries easier to use and apply to their product.",

keywords = "DevSecOps, National Institute of Standards and Technology (NIST), National Vulnerability Database, Open Web Application Security Project (OWASP), Security by Design, security development lifecycle, trustworthiness, V Model, vulnerability",

author = "Chen Shiang-Jiun and Pan Yu-Chun and Ma Yi-Wei and Chiang Cheng-Mou and Tsai Chi-Chin",

note = "Publisher Copyright: {\textcopyright} 2022 Global IT Research Institute-GiRI.; 24th International Conference on Advanced Communication Technology, ICACT 2022 ; Conference date: 13-02-2022 Through 16-02-2022",

year = "2022",

doi = "10.23919/ICACT53585.2022.9728811",

language = "???core.languages.en\_GB???",

series = "International Conference on Advanced Communication Technology, ICACT",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "412--416",

booktitle = "24th International Conference on Advanced Communication Technology",

}

Shiang-Jiun, C, Yu-Chun, P, Yi-Wei, M, Cheng-Mou, C & Chi-Chin, T 2022, Trustworthy Software Development-Practical view of security processes through MVP methodology. in 24th International Conference on Advanced Communication Technology: Artificial Intelligence Technologies toward Cybersecurity!!, ICACT 2022 - Proceedings. International Conference on Advanced Communication Technology, ICACT, vol. 2022-February, Institute of Electrical and Electronics Engineers Inc., pp. 412-416, 24th International Conference on Advanced Communication Technology, ICACT 2022, Virtual, Online, Korea, Republic of, 13/02/22. https://doi.org/10.23919/ICACT53585.2022.9728811

Trustworthy Software Development-Practical view of security processes through MVP methodology. / Shiang-Jiun, Chen; Yu-Chun, Pan; Yi-Wei, Ma et al.
24th International Conference on Advanced Communication Technology: Artificial Intelligence Technologies toward Cybersecurity!!, ICACT 2022 - Proceedings. Institute of Electrical and Electronics Engineers Inc., 2022. p. 412-416 (International Conference on Advanced Communication Technology, ICACT; Vol. 2022-February).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Trustworthy Software Development-Practical view of security processes through MVP methodology

AU - Shiang-Jiun, Chen

AU - Yu-Chun, Pan

AU - Yi-Wei, Ma

AU - Cheng-Mou, Chiang

AU - Chi-Chin, Tsai

PY - 2022

Y1 - 2022

N2 - With the popularization of 5G, one of its characteristics supports a large amount of IoT devices and a lot of open sources will be introduced. Therefore, trustworthiness has become more important for users and developers. According to IBM Systems Sciences Institute, we understand that taking software security into consideration in the early stages of development will save 99% cost. Therefore, security by design can not only save development costs but also improve the overall security of the software.In this paper, we mainly focus on the trustworthiness aspect in the software development process based on ISO/IEC/IEEE15288, NIST800-160, DoD Enterprise DevSecOps Reference, and A Guide to the Project Management Body of Knowledge (PMBOK Guide)-Seventh Edition and the Standard for Project Management concept. A trustworthiness framework will be proposed to make software more reliable and trustworthy for users and allows enterprises and developers to control and test the trustworthiness of production. After that, the analysis of software security is provided. This platform will provide the guidance for industries easier to use and apply to their product.

AB - With the popularization of 5G, one of its characteristics supports a large amount of IoT devices and a lot of open sources will be introduced. Therefore, trustworthiness has become more important for users and developers. According to IBM Systems Sciences Institute, we understand that taking software security into consideration in the early stages of development will save 99% cost. Therefore, security by design can not only save development costs but also improve the overall security of the software.In this paper, we mainly focus on the trustworthiness aspect in the software development process based on ISO/IEC/IEEE15288, NIST800-160, DoD Enterprise DevSecOps Reference, and A Guide to the Project Management Body of Knowledge (PMBOK Guide)-Seventh Edition and the Standard for Project Management concept. A trustworthiness framework will be proposed to make software more reliable and trustworthy for users and allows enterprises and developers to control and test the trustworthiness of production. After that, the analysis of software security is provided. This platform will provide the guidance for industries easier to use and apply to their product.

KW - DevSecOps

KW - National Institute of Standards and Technology (NIST)

KW - National Vulnerability Database

KW - Open Web Application Security Project (OWASP)

KW - Security by Design

KW - security development lifecycle

KW - trustworthiness

KW - V Model

KW - vulnerability

UR - https://www.scopus.com/pages/publications/85127534656

U2 - 10.23919/ICACT53585.2022.9728811

DO - 10.23919/ICACT53585.2022.9728811

M3 - ???researchoutput.researchoutputtypes.contributiontobookanthology.conference???

AN - SCOPUS:85127534656

T3 - International Conference on Advanced Communication Technology, ICACT

SP - 412

EP - 416

BT - 24th International Conference on Advanced Communication Technology

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 24th International Conference on Advanced Communication Technology, ICACT 2022

Y2 - 13 February 2022 through 16 February 2022

ER -

Shiang-Jiun C, Yu-Chun P, Yi-Wei M, Cheng-Mou C, Chi-Chin T. Trustworthy Software Development-Practical view of security processes through MVP methodology. In 24th International Conference on Advanced Communication Technology: Artificial Intelligence Technologies toward Cybersecurity!!, ICACT 2022 - Proceedings. Institute of Electrical and Electronics Engineers Inc. 2022. p. 412-416. (International Conference on Advanced Communication Technology, ICACT). doi: 10.23919/ICACT53585.2022.9728811

Trustworthy Software Development-Practical view of security processes through MVP methodology

Abstract

Publication series

Conference

Bibliographical note

Keywords

Access to Document

Other files and links

Fingerprint

Cite this