Specifying Non-Functional Requirements improves Software Vulnerability
Harsimran Kaur, Manju Aggarwal · 2023
Non-Functional Requirements (NFRs) focus on how the software system works and addresses the vital issues of quality for software system. NFRs are must to construct the security policies of the software system. Agile Software Methodology (ASD) methods tend to neglect NFRs as its main focus is mainly to deliver functional requirements. It has been considered during ASD that there is an increase in budget and effort on detailing NFRs at architecture level. But issues raised during security and penetration testing sometimes cost more if NFRs are ignored during development. This paper discusses how the need of security and penetration testing (for identifying Vulnerability issues) can be neutralized by specifying critical NFRs during analysis and specifying along with functional requirements while assigning stories to the developers. The approach is explained with the help of vulnerability issues identified during Penetration Test of real time health application.