Software Engineering Principles and Security Vulnerabilities

Abstract

Software Engineering principles have connections with design science, including cybersecurity concerns pertaining to vulnerabilities, trust and reputation. The work of this paper surveys, identifies, establishes and explores these connections. Identification and addressing of security issues and concerns during the early phases of software development life cycle, especially during the requirements analysis and design phases; and importance of inclusion of security requirements have also been illustrated. In addition to that, effective and efficient strategies and techniques to prevent, mitigate and remediate security vulnerabilities by the application of the principles of trust modelling and design science research methodology have also been presented.

Peer Review #1 of "A survey on common criteria (CC) evaluating schemes for security assessment of IT products (v0.1)"

“…The rapid advancements in the field of IT bring opportunities as well as new challenges in the form of associated cyber threats, technological vulnerabilities, and security risks. These misconfigurations and software flaws make IT products open to attacks and exploitation (Rastogi, 2019;Costa, 2019). During the last two decades, security threats have been growing exponentially because of the ubiquitous nature of the evolution towards IT products and lack of secure development practices by developer; thereby introducing major concerns for consumers, organizations, regulators, and government authorities.…”

Peer Review #2 of "A survey on common criteria (CC) evaluating schemes for security assessment of IT products (v0.1)"

“…The rapid advancements in the field of IT bring opportunities as well as new challenges in the form of associated cyber threats, technological vulnerabilities, and security risks. These misconfigurations and software flaws make IT products open to attacks and exploitation (Rastogi, 2019;Costa, 2019). During the last two decades, security threats have been growing exponentially because of the ubiquitous nature of the evolution towards IT products and lack of secure development practices by developer; thereby introducing major concerns for consumers, organizations, regulators, and government authorities.…”