Title
Systematic Mapping of the Literature on Secure Software Development
Date Issued
01 January 2021
Access level
open access
Resource Type
journal article
Publisher(s)
Institute of Electrical and Electronics Engineers Inc.
Abstract
The accelerated growth in exploiting vulnerabilities due to errors or failures in the software development process is a latent concern in the Software Industry. In this sense, this study aims to provide an overview of the Secure Software Development trends to help identify topics that have been extensively studied and those that still need to be. Therefore, in this paper, a systematic mapping review with PICo search strategies was conducted. A total of 867 papers were identified, of which only 528 papers were selected for this review. The main findings correspond to the Software Requirements Security, where the Elicitation and Misuse Cases reported more frequently. In Software Design Security, recurring themes are security in component-based software development, threat model, and security patterns. In the Software Construction Security, the most frequent topics are static code analysis and vulnerability detection. Finally, in Software Testing Security, the most frequent topics are vulnerability scanning and penetration testing. In conclusion, there is a diversity of methodologies, models, and tools with specific objectives in each secure software development stage.
Start page
36852
End page
36867
Volume
9
Language
English
OCDE Knowledge area
Ingeniería de sistemas y comunicaciones Sistemas de automatización, Sistemas de control
Scopus EID
2-s2.0-85101857461
Source
IEEE Access
ISSN of the container
21693536
Sources of information: Directorio de Producción Científica Scopus