• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>Agile processes in software engineering and extreme programming >Myths and Facts About Static Application Security Testing Tools: An Action Research at Telenor Digital
【24h】

Myths and Facts About Static Application Security Testing Tools: An Action Research at Telenor Digital

机译：静态应用程序安全测试工具的神话与事实：Telenor Digital的一项行动研究

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

It is claimed that integrating agile and security in practice is challenging. There is the notion that security is a heavy process, requires expertise, and consumes developers' time. These contrast with the agile vision. Regardless of these challenges, it is important for organizations to address security within their agile processes since critical assets must be protected against attacks. One way is to integrate tools that could help to identify security weaknesses during implementation and suggest methods to refactor them. We used quantitative and qualitative approaches to investigate the efficiency of the tools and what they mean to the actual users (i.e. developers) at Telenor Digital. Our findings, although not surprising, show that several barriers exist both in terms of tool's performance and developers' perceptions. We suggest practical ways for improvement.
机译：据称，在实践中整合敏捷和安全性具有挑战性。有人认为安全性是一个繁重的过程，需要专业知识，并且会消耗开发人员的时间。这些与敏捷愿景形成鲜明对比。无论面临这些挑战，组织都必须在其敏捷过程中解决安全问题，因为必须保护关键资产免受攻击。一种方法是集成工具，这些工具可以帮助在实施过程中识别安全漏洞并提出重构方法。我们使用定量和定性方法来研究工具的效率以及它们对Telenor Digital的实际用户（即开发人员）的意义。我们的发现尽管不足为奇，但表明在工具性能和开发人员的感知方面都存在一些障碍。我们建议实用的改进方法。

著录项

相似文献

  • 外文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号