A Systematic Literature Review on Secure Software Development using Feature Driven Development (FDD) Agile Model

Abstract

Agile methodologies have gained recognition as efficient development processes through their quick delivery of software, even under time constraints. However, like other agile methods such as Scrum, Extreme Programming (XP) and The Dynamic Systems Development Method (DSDM), Feature Driven Development (FDD) has been criticized due to the unavailability of security elements in its twelve practices. In order to examine this matter more closely, we conducted a systematic literature review (SLR) and studied literature for the years 2001-2012. Our findings highlight that, in its current form, the FDD model partially supports the development of secure software. However, there is little research on this topic, as detailed information about the usage of secure software is rarely published. Thus, we have been able to conclude that the existing five phases of FDD have not been enough to develop secure software until recently. For this reason, security-based phase and practices in FDD need to be proposed.

Plataforma web de monitoreo del proceso de titulación del programa de Ingeniería de Software

“…El diseño Frontend Driven Development (FDD) es una metodología emergente que busca cambiar el paradigma de cómo los desarrolladores llevan a cabo sus proyectos de software [6], todo es basado en las interfaces del usuario final, se inicia con un diseño de lo que será la pantalla final para al escrutinio de los demás desarrolladores de frontend, para recibir sugerencias u observaciones, posteriormente se crea un rediseño de las interfaces con el fin de atender las observaciones, esto convierte a la metodología en proceso dinámico y ágil [10] [11].…”

Agile Software Development Techniques: A Survey

“…This method is different from other techniques of agile development because the planning of the whole project and upfront design is its basic concerns. It has a basic five stages [55].…”

The practice of secure software development in SDLC: an investigation through existing model and a case study

“…In addition, detailed information about the usage of secure software is rarely published. One important area, as noted by Ahmad et al ., , Arbain et al ., , and Devanbu and Stubblebine in more than a decade ago, is that focused on the non‐functional requirements of software security, are not well defined in software security research. The area place emphasizes on effective design and the use of policies and a framework for security requirements, to sufficiently address software security concerns in various software development projects.…”