Criteria Prioritization in Adaptive Security Activities Selection, ASAS Model using Analytic Network Process, ANP
Organizations have proposed the best practices of security activities in software development life cycle as guidance for development team. However, the implementation of the security activities are influenced by criteria which are interdependent to each other and dynamic. Those criteria are experien...
Saved in:
Main Authors: | , |
---|---|
Format: | Conference or Workshop Item |
Published: |
Institute of Electrical and Electronics Engineers Inc.
2019
|
Online Access: | https://www.scopus.com/inward/record.uri?eid=2-s2.0-85079284571&doi=10.1109%2fAINS47559.2019.8968709&partnerID=40&md5=97abc152ad8f89094fee5c1fb75ca83e http://eprints.utp.edu.my/23533/ |
Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
id |
my.utp.eprints.23533 |
---|---|
record_format |
eprints |
spelling |
my.utp.eprints.235332021-08-19T07:57:35Z Criteria Prioritization in Adaptive Security Activities Selection, ASAS Model using Analytic Network Process, ANP Jakeri, M.M. Hassan, M.F. Organizations have proposed the best practices of security activities in software development life cycle as guidance for development team. However, the implementation of the security activities are influenced by criteria which are interdependent to each other and dynamic. Those criteria are experience, skill and knowledge; teams workload; development team size; development timeline; and cost/budget. Therefore, the selection of security activities must be based on the priority of the criteria and adaptive. This paper addresses the adaptive security activities selection model as a multi-criteria decision making (MCDM) issue. Analytic Network Process (ANP) is proposed for weight calculation and criteria prioritization. Hypothetical examples were presented based on hard constraints faced by in-house web-based application development team in two different scenarios. The Decision Maker made the judgement by using the online ASAS model. The results show that experience, skill and knowledge get the highest priority in the first scenario while budget/cost get the highest priority in the second scenario. These prioritization will be used as a major requirement in security activities selection. © 2019 IEEE. Institute of Electrical and Electronics Engineers Inc. 2019 Conference or Workshop Item NonPeerReviewed https://www.scopus.com/inward/record.uri?eid=2-s2.0-85079284571&doi=10.1109%2fAINS47559.2019.8968709&partnerID=40&md5=97abc152ad8f89094fee5c1fb75ca83e Jakeri, M.M. and Hassan, M.F. (2019) Criteria Prioritization in Adaptive Security Activities Selection, ASAS Model using Analytic Network Process, ANP. In: UNSPECIFIED. http://eprints.utp.edu.my/23533/ |
institution |
Universiti Teknologi Petronas |
building |
UTP Resource Centre |
collection |
Institutional Repository |
continent |
Asia |
country |
Malaysia |
content_provider |
Universiti Teknologi Petronas |
content_source |
UTP Institutional Repository |
url_provider |
http://eprints.utp.edu.my/ |
description |
Organizations have proposed the best practices of security activities in software development life cycle as guidance for development team. However, the implementation of the security activities are influenced by criteria which are interdependent to each other and dynamic. Those criteria are experience, skill and knowledge; teams workload; development team size; development timeline; and cost/budget. Therefore, the selection of security activities must be based on the priority of the criteria and adaptive. This paper addresses the adaptive security activities selection model as a multi-criteria decision making (MCDM) issue. Analytic Network Process (ANP) is proposed for weight calculation and criteria prioritization. Hypothetical examples were presented based on hard constraints faced by in-house web-based application development team in two different scenarios. The Decision Maker made the judgement by using the online ASAS model. The results show that experience, skill and knowledge get the highest priority in the first scenario while budget/cost get the highest priority in the second scenario. These prioritization will be used as a major requirement in security activities selection. © 2019 IEEE. |
format |
Conference or Workshop Item |
author |
Jakeri, M.M. Hassan, M.F. |
spellingShingle |
Jakeri, M.M. Hassan, M.F. Criteria Prioritization in Adaptive Security Activities Selection, ASAS Model using Analytic Network Process, ANP |
author_facet |
Jakeri, M.M. Hassan, M.F. |
author_sort |
Jakeri, M.M. |
title |
Criteria Prioritization in Adaptive Security Activities Selection, ASAS Model using Analytic Network Process, ANP |
title_short |
Criteria Prioritization in Adaptive Security Activities Selection, ASAS Model using Analytic Network Process, ANP |
title_full |
Criteria Prioritization in Adaptive Security Activities Selection, ASAS Model using Analytic Network Process, ANP |
title_fullStr |
Criteria Prioritization in Adaptive Security Activities Selection, ASAS Model using Analytic Network Process, ANP |
title_full_unstemmed |
Criteria Prioritization in Adaptive Security Activities Selection, ASAS Model using Analytic Network Process, ANP |
title_sort |
criteria prioritization in adaptive security activities selection, asas model using analytic network process, anp |
publisher |
Institute of Electrical and Electronics Engineers Inc. |
publishDate |
2019 |
url |
https://www.scopus.com/inward/record.uri?eid=2-s2.0-85079284571&doi=10.1109%2fAINS47559.2019.8968709&partnerID=40&md5=97abc152ad8f89094fee5c1fb75ca83e http://eprints.utp.edu.my/23533/ |
_version_ |
1738656485542461440 |
score |
13.211869 |