Agile Security Using an Incremental Security Architecture

Howard Chivers; Richard F. Paige; Xiaocheng Ge

doi:10.1007/11499053_7

Agile Security Using an Incremental Security Architecture

Howard Chivers, Richard F. Paige, Xiaocheng Ge

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

23 Citations (Scopus)

Abstract

The effective provision of security in an agile development requires a new approach: traditional security practices are bound to equally traditional development methods. However, there are concerns that security is difficult to build incrementally, and can prove prohibitively expensive to refactor. This paper describes how to grow security, organically, within an agile project, by using an incremental security architecture which evolves with the code. The architecture provides an essential bridge between system-wide security properties and implementation mechanisms, a focus for understanding security in the project, and a trigger for security refactoring. The paper also describes criteria that allow implementers to recognize when refactoring is needed, and a concrete example that contrasts incremental and 'top-down' architectures.

Original language	English
Title of host publication	Extreme Programming and Agile Processes in Software Engineering
Subtitle of host publication	6th International Conference, XP 2005, Sheffield, UK, June 18-23, 2005, Proceedings
Editors	Hubert Baumeister, Michele Marchesi, Mike Holcombe
Publisher	Springer-Verlag Berlin Heidelberg
Pages	57-65
Number of pages	9
Volume	LNCS 3556
Edition	1
ISBN (Electronic)	9783540314875
ISBN (Print)	9783540262770
DOIs	https://doi.org/10.1007/11499053_7
Publication status	Published - 2005
Externally published	Yes
Event	The 6th International Conference on Extreme Programming and Agile Processes in Software Engineering - Sheffield, United Kingdom Duration: 18 Jun 2005 → 23 Jun 2005 Conference number: 6 https://dl.acm.org/doi/10.1007/11499053_39

Publication series

Name	Lecture Notes in Computer Science (Programming and Software Engineering)
Publisher	Springer
Volume	3556
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	The 6th International Conference on Extreme Programming and Agile Processes in Software Engineering
Abbreviated title	XP 2005
Country/Territory	United Kingdom
City	Sheffield
Period	18/06/05 → 23/06/05
Internet address	https://dl.acm.org/doi/10.1007/11499053_39

Access to Document

10.1007/11499053_7Licence: Unspecified

Cite this

Chivers, H., Paige, R. F., & Ge, X. (2005). Agile Security Using an Incremental Security Architecture. In H. Baumeister, M. Marchesi, & M. Holcombe (Eds.), Extreme Programming and Agile Processes in Software Engineering: 6th International Conference, XP 2005, Sheffield, UK, June 18-23, 2005, Proceedings (1 ed., Vol. LNCS 3556, pp. 57-65). (Lecture Notes in Computer Science (Programming and Software Engineering); Vol. 3556). Springer-Verlag Berlin Heidelberg. https://doi.org/10.1007/11499053_7

Chivers, Howard ; Paige, Richard F. ; Ge, Xiaocheng. / Agile Security Using an Incremental Security Architecture. Extreme Programming and Agile Processes in Software Engineering: 6th International Conference, XP 2005, Sheffield, UK, June 18-23, 2005, Proceedings. editor / Hubert Baumeister ; Michele Marchesi ; Mike Holcombe. Vol. LNCS 3556 1. ed. Springer-Verlag Berlin Heidelberg, 2005. pp. 57-65 (Lecture Notes in Computer Science (Programming and Software Engineering)).

@inproceedings{aa5ef46aa4d54270ab78adfbf442f35c,

title = "Agile Security Using an Incremental Security Architecture",

abstract = "The effective provision of security in an agile development requires a new approach: traditional security practices are bound to equally traditional development methods. However, there are concerns that security is difficult to build incrementally, and can prove prohibitively expensive to refactor. This paper describes how to grow security, organically, within an agile project, by using an incremental security architecture which evolves with the code. The architecture provides an essential bridge between system-wide security properties and implementation mechanisms, a focus for understanding security in the project, and a trigger for security refactoring. The paper also describes criteria that allow implementers to recognize when refactoring is needed, and a concrete example that contrasts incremental and 'top-down' architectures.",

keywords = "Security Requirement, Security Feature, Estate Agent, Security Architecture, Agile Method",

author = "Howard Chivers and Paige, {Richard F.} and Xiaocheng Ge",

year = "2005",

doi = "10.1007/11499053_7",

language = "English",

isbn = "9783540262770",

volume = "LNCS 3556",

series = "Lecture Notes in Computer Science (Programming and Software Engineering)",

publisher = "Springer-Verlag Berlin Heidelberg",

pages = "57--65",

editor = "Hubert Baumeister and Michele Marchesi and Mike Holcombe",

booktitle = "Extreme Programming and Agile Processes in Software Engineering",

address = "Germany",

edition = "1",

note = "The 6th International Conference on Extreme Programming and Agile Processes in Software Engineering, XP 2005 ; Conference date: 18-06-2005 Through 23-06-2005",

url = "https://dl.acm.org/doi/10.1007/11499053_39",

}

Chivers, H, Paige, RF & Ge, X 2005, Agile Security Using an Incremental Security Architecture. in H Baumeister, M Marchesi & M Holcombe (eds), Extreme Programming and Agile Processes in Software Engineering: 6th International Conference, XP 2005, Sheffield, UK, June 18-23, 2005, Proceedings. 1 edn, vol. LNCS 3556, Lecture Notes in Computer Science (Programming and Software Engineering), vol. 3556, Springer-Verlag Berlin Heidelberg, pp. 57-65, The 6th International Conference on Extreme Programming and Agile Processes in Software Engineering, Sheffield, United Kingdom, 18/06/05. https://doi.org/10.1007/11499053_7

Agile Security Using an Incremental Security Architecture. / Chivers, Howard; Paige, Richard F.; Ge, Xiaocheng.

Extreme Programming and Agile Processes in Software Engineering: 6th International Conference, XP 2005, Sheffield, UK, June 18-23, 2005, Proceedings. ed. / Hubert Baumeister; Michele Marchesi; Mike Holcombe. Vol. LNCS 3556 1. ed. Springer-Verlag Berlin Heidelberg, 2005. p. 57-65 (Lecture Notes in Computer Science (Programming and Software Engineering); Vol. 3556).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Agile Security Using an Incremental Security Architecture

AU - Chivers, Howard

AU - Paige, Richard F.

AU - Ge, Xiaocheng

N1 - Conference code: 6

PY - 2005

Y1 - 2005

N2 - The effective provision of security in an agile development requires a new approach: traditional security practices are bound to equally traditional development methods. However, there are concerns that security is difficult to build incrementally, and can prove prohibitively expensive to refactor. This paper describes how to grow security, organically, within an agile project, by using an incremental security architecture which evolves with the code. The architecture provides an essential bridge between system-wide security properties and implementation mechanisms, a focus for understanding security in the project, and a trigger for security refactoring. The paper also describes criteria that allow implementers to recognize when refactoring is needed, and a concrete example that contrasts incremental and 'top-down' architectures.

AB - The effective provision of security in an agile development requires a new approach: traditional security practices are bound to equally traditional development methods. However, there are concerns that security is difficult to build incrementally, and can prove prohibitively expensive to refactor. This paper describes how to grow security, organically, within an agile project, by using an incremental security architecture which evolves with the code. The architecture provides an essential bridge between system-wide security properties and implementation mechanisms, a focus for understanding security in the project, and a trigger for security refactoring. The paper also describes criteria that allow implementers to recognize when refactoring is needed, and a concrete example that contrasts incremental and 'top-down' architectures.

KW - Security Requirement

KW - Security Feature

KW - Estate Agent

KW - Security Architecture

KW - Agile Method

UR - http://www.scopus.com/inward/record.url?scp=26444465547&partnerID=8YFLogxK

U2 - 10.1007/11499053_7

DO - 10.1007/11499053_7

M3 - Conference contribution

AN - SCOPUS:26444465547

SN - 9783540262770

VL - LNCS 3556

T3 - Lecture Notes in Computer Science (Programming and Software Engineering)

SP - 57

EP - 65

BT - Extreme Programming and Agile Processes in Software Engineering

A2 - Baumeister, Hubert

A2 - Marchesi, Michele

A2 - Holcombe, Mike

PB - Springer-Verlag Berlin Heidelberg

T2 - The 6th International Conference on Extreme Programming and Agile Processes in Software Engineering

Y2 - 18 June 2005 through 23 June 2005

ER -

Chivers H, Paige RF, Ge X. Agile Security Using an Incremental Security Architecture. In Baumeister H, Marchesi M, Holcombe M, editors, Extreme Programming and Agile Processes in Software Engineering: 6th International Conference, XP 2005, Sheffield, UK, June 18-23, 2005, Proceedings. 1 ed. Vol. LNCS 3556. Springer-Verlag Berlin Heidelberg. 2005. p. 57-65. (Lecture Notes in Computer Science (Programming and Software Engineering)). doi: 10.1007/11499053_7

Agile Security Using an Incremental Security Architecture

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this