NDLI: FISA-XP:an agile-based integration of security activities with extreme programming

Content Provider	ACM Digital Library
Author	Banati, Hema Singhal, Archana
Abstract	The steep rise in security threats has forced organizations to adopt sound security practices right from the development stage of any software project. With the rising popularity of lightweight, agile methodologies, this becomes more complicated. This paper proposes a framework, FISA-XP, which can be adopted for the development of a secure software system. The proposed framework integrates security activities with the core activities of Extreme Programming based on their degree of agility. In order to calculate agility degree, some agility features are selected using a threshold value. The compatibility of the agile activities with security activities is subsequently assessed by introducing an integration matrix that describes whether integration of an agile activity with each security activity is possible or not. This framework assists in integrating security activities with agile activities, keeping the combined agility degree within acceptable limits. Thus, our approach introduces an Acceptable Agility Reduction Factor, which gives a threshold value for an acceptable reduction in agility degree. If reduction in combined agility degree is below the threshold value then that security activity is not accepted for integration. TISA-XP, an automated tool, has been designed to enable developers to use FISA-XP practically. This tool has been used by a software-developing company on an experimental basis and the feedback reflects its practical feasibility.
Starting Page	1
Ending Page	14
Page Count	14
File Format	PDF
ISSN	01635948
DOI	10.1145/2597716.2597728
Journal	ACM SIGSOFT Software Engineering Notes (SOEN)
Volume Number	39
Issue Number	3
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	1979-04-01
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Clasp process Security activities Extreme programming method Agile methodology Agility degree
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Integration Analysis of Security Activities from the Perspective of Agility

Formal agility. How much of each? (2003).

Selection of Security Activities for Integration with Agile Methods after Combining their Agility and Effectiveness

Building security requirements with CLASP

An encyclopedic approach for realization of security activities with agile methodologies

Agile development in computer science education:practices and prognosis

Trading discipline for agility? a question of position not opposition (2005).

A simple model of agile software processes -- or -- extreme programming annealed

The Relationship between Developers and Customers in Agile Methodology

FISA-XP:an agile-based integration of security activities with extreme programming

Similar Documents

Integration Analysis of Security Activities from the Perspective of Agility

Formal agility. How much of each? (2003).

Selection of Security Activities for Integration with Agile Methods after Combining their Agility and Effectiveness

Building security requirements with CLASP

An encyclopedic approach for realization of security activities with agile methodologies

Agile development in computer science education:practices and prognosis

Trading discipline for agility? a question of position not opposition (2005).

A simple model of agile software processes -- or -- extreme programming annealed

The Relationship between Developers and Customers in Agile Methodology

FISA-XP:an agile-based integration of security activities with extreme programming