.png){kind=icon}
返回
Software security requirements management as an emerging cloud computing service
.png){kind=icon}
OA
AI
DOI：10.1016/j.ijinfomgt.2016.03.008.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Emerging cloud applications are growing rapidly and the need for identifying and managing service requirements is also highly important and critical at present. Software Engineering and Information Systems has established techniques, methods and technology over two decades to help achieve cloud service requirements, design, development, and testing. However, due to the lack of understanding of software security vulnerabilities that should have been identified and managed during the requirements engineering phase, we have not been so successful in applying software engineering, information management, and requirements management principles that have been established for the past at least 25 years, when developing secure software systems. Therefore, software security cannot just be added after a system has been built and delivered to customers as seen in today's software applications. This paper provides concise methods, techniques, and best practice requirements engineering and management as an emerging cloud service (SSREMaaES) and also provides guidelines on software security as a service. This paper also discusses an Integrated-Secure SDLC model (IS-SDLC), which will benefit practitioners, researchers, learners, and educators. This paper illustrates our approach for a large cloud system Amazon EC2 service. (C) 2016 Elsevier Ltd. All rights reserved.
Keyword:
Emerging cloud services
Software security
Software security requirements engineering
Secured software development
SQUARE method
BSI
Touchpoint
SDL
Requirements engineering and management as an emerging service (SSREMaaES)
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
27
论文数:
2.9K
被引数:
2.4W
机构
引用论文
.png){kind=icon}
分享收藏
没有更多内容
没有更多内容