Challenges in Agile Security Engineering: A Case Study

View Sample PDF

Author(s): Kalle Rindell (University of Turku, Finland), Sami Hyrynsalmi (Tampere University of Technology, Finland)and Ville Leppänen (University of Turku, Finland)
Copyright: 2019
Pages: 26
Source title: Exploring Security in Software Architecture and Design
Source Author(s)/Editor(s): Michael Felderer (University of Innsbruck, Austria)and Riccardo Scandariato (Chalmers University of Technology, Sweden & University of Gothenburg, Sweden)
DOI: 10.4018/978-1-5225-6313-6.ch012

Keywords: Computer Science & IT / Information Science Reference / IT Security and Ethics / Systems & Software Design

Purchase

View Challenges in Agile Security Engineering: A Case Study on the publisher's website for pricing and purchasing information.

Abstract

This chapter describes a case of a large ICT service provider building a secure identity management system for a government customer. Security concerns are a guiding factor in the design of software-intensive products and services. They also affect the processes of their development. In regulated environments, development of products requires special security for the development processes, product release, maintenance and hosting, and also require security-oriented management and governance. Integrating the security engineering processes into an agile development model is argued to have the effect of mitigating the agile methods' intended benefits. The project case was an effort of multi-team, multi-site, security engineering, and development work, executed using the Scrum framework and regulated by governmental security standards and guidelines. In this case research, the experiences in combining security engineering with agile development are reported, challenges discussed, and certain security enhancements to Scrum are proposed.

The IRMA Community

Research IRM

Challenges in Agile Security Engineering: A Case Study

Purchase

Abstract

Related Content

IRMA Sponsors