Til hovedinnhold

Understanding Challenges to Adoption of the Protection Poker Software Security Game

Understanding Challenges to Adoption of the Protection Poker Software Security Game

Kategori
Del av bok/rapport
Sammendrag
Currently, security requirements are often neglected in agile projects. Despite many approaches to agile security requirements engineering in literature, there is little empirical research available on why there is limited adoption of these techniques. In this paper we describe a case study on challenges facing adoption of the Protection Poker game; a collaborative and lightweight software security risk estimation technique that is particularly suited for agile teams. Results show that Protection Poker has the potential to be adopted by agile teams. Key benefits identified include good discussions on security and the development project, increased knowledge and awareness of security, and contributions to security requirements. Challenges include managing discussions and the time it takes to play, ensuring confidence in the results from playing the game, and integrating results in a way that improves security of the end-product.
Oppdragsgiver
  • Norges forskningsråd / 247678
Språk
Engelsk
Forfatter(e)
Institusjon(er)
  • SINTEF Digital / Software Engineering, Safety and Security
  • Norges teknisk-naturvitenskapelige universitet
År
2019
Publisert i
Lecture Notes in Computer Science
ISSN
0302-9743
Forlag
Springer
Bok
Computer Security ESORICS 2018 International Workshops, CyberICPS 2018 and SECPRE 2018, Barcelona, Spain, September 6–7, 2018, Revised Selected Papers
Hefte nr.
-
ISBN
978-3-030-12786-2
Side(r)
153 - 172