Trustworthy Software Development — practical view of security processes through MVP methodology
Chen Shiang-Jiun, Pan Yuchun, Yiwei Ma, Cheng-Mou Chiang, Tsai Chi-Chin · 2022 24th International Conference on Advanced Communication Technology (ICACT) · 2022
With the popularization of 5G, one of its characteristics supports a large amount of IoT devices and a lot of open sources will be introduced. Therefore, trustworthiness has become more important for users and developers. According to IBM Systems Sciences Institute, we understand that taking software security into consideration in the early stages of development will save 99% cost. Therefore, security by design can not only save development costs but also improve the overall security of the software.In this paper, we mainly focus on the trustworthiness aspect in the software development process based on ISO/IEC/IEEE15288, NIST800-160, DoD Enterprise DevSecOps Reference, and A Guide to the Project Management Body of Knowledge (PMBOK Guide) - Seventh Edition and the Standard for Project Management concept. A trustworthiness framework will be proposed to make software more reliable and trustworthy for users and allows enterprises and developers to control and test the trustworthiness of production. After that, the analysis of software security is provided. This platform will provide the guidance for industries easier to use and apply to their product.