Weir, Charles Alexander Forbes and Blair, Lynne and Becker, Ingolf and Sasse, Angela and Noble, James (2018) Light-touch Interventions to Improve Software Development Security. In: Proceedings of the IEEE Cybersecurity Development Conference 2018 :. IEEE.
WeirSecDev2018.pdf - Accepted Version
Available under License Creative Commons Attribution.
Download (568kB)
Abstract
Many software developers still have little interest in software security. To change this, we need ‘interventions’ to development teams to motivate and help them towards security improvement. An intervention costing less than two days’ effort from a facilitator plus half a day of team effort can significantly improve that team’s software security. This case study describes how this approach was used with one commercial team, and identifies its impact using Participative Action Research. With suitable improvements, the approach has the potential to help many other development teams.