Risk Management During Software Development: Results of a Survey in Software Houses from Germany, Austria and Switzerland

Author(s):  
Michael Felderer ◽  
Florian Auer ◽  
Johannes Bergsmann
2021 ◽  
Vol 43 (4) ◽  
pp. 113-124
Author(s):  
D.V. Saveliev ◽  

The article defines the concept of threat model. Described a list of current security guidelines for the development and administration of web systems. Formed the list of cybersecurity threats, the consequences of their implementation are determined. Described the process of forming a model of cybersecurity threats of web systems. Defined the list of threats based on the recommendations and experience of authoritative organizations in the world and Ukraine. Defined the concepts of risk, risk index and risk status for the security of web systems. Defined the main principles of risk management in software development projects.


Author(s):  
Mohamed A Sheriff ◽  
Elli Georgiadou

The ultimate object of software development should be to deliver value to all stakeholders. The traditional approach to delivering this value is to ensure that the software developed is of the highest quality. A number of quality models have been proposed to specify or describe what constitutes high quality software. The ISO9126 is one such model and perhaps the most comprehensive. Similarly, there are several methods, frameworks and guidelines for ensuring software quality in either the development or use process or both. Software Quality Management and Risk Management are probably the two most popular methods employed by developers during software development and implementation to deliver quality. In this paper the authors examine whether, and to what extent, the implied value propositions of software products as portrayed by the ISO9126 quality model and the prescribed processes in Software Quality Management and Risk Management, map onto user value perceptions and experiences. An ontology of value, in the form of a value tree, is developed and used to identify and analyse the key value dimensions of the ISO9126 quality model and the Software Quality Management and Risk Management process methods. These are then mapped onto contextualised user value characterisations derived from the extant literature. Differences identified are analysed and discussed and the authors suggest approaches that could narrow the perennial gap between idealised quality product and process models and stakeholder perceptions and actualisations of software value.


EDPACS ◽  
2007 ◽  
Vol 35 (3) ◽  
pp. 10-24
Author(s):  
Mojgan Mohtashami ◽  
Thomas Marlowe ◽  
Vassilka Kirova ◽  
Fadi P. Deek

Sign in / Sign up

Export Citation Format

Share Document