Security Requirement Engineering Practices: Sharing the Insights from Software Practitioners in a Packaging Company
摘要
Security requirement engineering (SRE) is becoming increasingly important because the requirements are the groundwork of software which can ensure that the software produced addresses the security element. Although its significance has been disclosed, there still exist complaints received by a packaging company about security breaches in the systems they are using. The most critical issues the users face are authentication problems in accessing their internal systems, password cracking and software malfunctions. Despite rapid advances in security research, there remains a substantial knowledge gap between software practitioners in the industry and academic research. Similarly, current practices of SRE being performed by software practitioners in the packaging company are unknown. Thus, a survey was conducted among 32 software practitioners in the abovementioned company to examine current practices of SRE in real-world projects. The study was conducted using a quantitative approach through an online survey. The data was analysed by using descriptive statistical analysis. The findings of this study indicate that software practitioners in the firm are becoming more aware of the necessity of security requirements engineering practices. Unfortunately, some are yet to implement security standards and guidelines, although the company enforces security standards during software development. This study enhances the body of knowledge by uncovering the current practices of SRE among software practitioners.