Secure paradigm for web application development

B. Subedi; Abeer Alsadoon; P. W C Prasad; A. Elchouemi

doi:10.1109/RoEduNet.2016.7753243

Secure paradigm for web application development

B. Subedi, Abeer Alsadoon, P. W C Prasad, A. Elchouemi

Research output: Book chapter/Published conference paper › Conference paper › peer-review

9 Citations (Scopus)

Abstract

Security protection is usually thought to be a separate process in web application development phases but the external security protection mechanisms are not effective to control threats and vulnerabilities in web applications. As a consequence, researchers have realized security development should be an integral part of System Development Lifecycle of web applications. This article presents a universal secure paradigm which the web developers can apply in the development process to enhance the security features of web applications. The proposed paradigm is an extension to security development practices with agile methodology. It consists of three phases, i.e., inception, construction and transition. Inception can be mapped to analysis stage of traditional development life cycle process and transition refers to security assurance stage before deployment whereas construction phase is iterative process of security development.

Original language	English
Title of host publication	Networking in Education and Research
Subtitle of host publication	RoEdunet International Conference (RoEduNet) 15th edition
Place of Publication	United States
Publisher	IEEE, Institute of Electrical and Electronics Engineers
Pages	1-6
Number of pages	6
ISBN (Electronic)	9781509053988
ISBN (Print)	9781509053995 (Print on demand)
DOIs	https://doi.org/10.1109/RoEduNet.2016.7753243
Publication status	Published - 22 Nov 2016
Event	15th RoEduNet Conference: Networking in Education and Research - University Politehnica Bucharest, Bucharest, Romania Duration: 07 Sept 2016 → 09 Sept 2016 https://conference.roedu.net/index.php/roedunetconf/2016 https://conference.roedu.net/public/conferences/2/schedConfs/7/program-en_US.pdf (Conference program)

Conference

Conference	15th RoEduNet Conference
Abbreviated title	Networking in Education and Research
Country/Territory	Romania
City	Bucharest
Period	07/09/16 → 09/09/16
Other	The 15th edition of Agency ARNIEC/RoEduNet's (Romanian Education Network) annual Conference organized in Bucharest by Agency ARNIEC/RoEduNet and University Politehnica Bucharest under the patronage of Ministry of National Education and Scientific Research of Romania, offers special opportunities for information exchange in computer networking: technical and strategic aspects, communication issues, and of course their applications in education and research.
Internet address	https://conference.roedu.net/index.php/roedunetconf/2016 https://conference.roedu.net/public/conferences/2/schedConfs/7/program-en_US.pdf (Conference program)

Access to Document

10.1109/RoEduNet.2016.7753243

Cite this

@inproceedings{16992ec032214ba6881cffec54578828,

title = "Secure paradigm for web application development",

abstract = "Security protection is usually thought to be a separate process in web application development phases but the external security protection mechanisms are not effective to control threats and vulnerabilities in web applications. As a consequence, researchers have realized security development should be an integral part of System Development Lifecycle of web applications. This article presents a universal secure paradigm which the web developers can apply in the development process to enhance the security features of web applications. The proposed paradigm is an extension to security development practices with agile methodology. It consists of three phases, i.e., inception, construction and transition. Inception can be mapped to analysis stage of traditional development life cycle process and transition refers to security assurance stage before deployment whereas construction phase is iterative process of security development.",

keywords = "Development lifecycle, Risks, Security, Threats, Vulnerabilities, Web application",

author = "B. Subedi and Abeer Alsadoon and Prasad, {P. W C} and A. Elchouemi",

note = "Includes bibliographical references.; 15th RoEduNet Conference : Networking in Education and Research, Networking in Education and Research ; Conference date: 07-09-2016 Through 09-09-2016",

year = "2016",

month = nov,

day = "22",

doi = "10.1109/RoEduNet.2016.7753243",

language = "English",

isbn = "9781509053995 (Print on demand)",

pages = "1--6",

booktitle = "Networking in Education and Research",

publisher = "IEEE, Institute of Electrical and Electronics Engineers",

address = "United States",

url = "https://conference.roedu.net/index.php/roedunetconf/2016, https://conference.roedu.net/public/conferences/2/schedConfs/7/program-en_US.pdf",

}

Subedi, B, Alsadoon, A, Prasad, PWC & Elchouemi, A 2016, Secure paradigm for web application development. in Networking in Education and Research: RoEdunet International Conference (RoEduNet) 15th edition., 7753243, IEEE, Institute of Electrical and Electronics Engineers, United States, pp. 1-6, 15th RoEduNet Conference, Bucharest, Romania, 07/09/16. https://doi.org/10.1109/RoEduNet.2016.7753243

Secure paradigm for web application development. / Subedi, B.; Alsadoon, Abeer; Prasad, P. W C et al.
Networking in Education and Research: RoEdunet International Conference (RoEduNet) 15th edition. United States: IEEE, Institute of Electrical and Electronics Engineers, 2016. p. 1-6 7753243.

Research output: Book chapter/Published conference paper › Conference paper › peer-review

TY - GEN

T1 - Secure paradigm for web application development

AU - Subedi, B.

AU - Alsadoon, Abeer

AU - Prasad, P. W C

AU - Elchouemi, A.

N1 - Includes bibliographical references.

PY - 2016/11/22

Y1 - 2016/11/22

N2 - Security protection is usually thought to be a separate process in web application development phases but the external security protection mechanisms are not effective to control threats and vulnerabilities in web applications. As a consequence, researchers have realized security development should be an integral part of System Development Lifecycle of web applications. This article presents a universal secure paradigm which the web developers can apply in the development process to enhance the security features of web applications. The proposed paradigm is an extension to security development practices with agile methodology. It consists of three phases, i.e., inception, construction and transition. Inception can be mapped to analysis stage of traditional development life cycle process and transition refers to security assurance stage before deployment whereas construction phase is iterative process of security development.

AB - Security protection is usually thought to be a separate process in web application development phases but the external security protection mechanisms are not effective to control threats and vulnerabilities in web applications. As a consequence, researchers have realized security development should be an integral part of System Development Lifecycle of web applications. This article presents a universal secure paradigm which the web developers can apply in the development process to enhance the security features of web applications. The proposed paradigm is an extension to security development practices with agile methodology. It consists of three phases, i.e., inception, construction and transition. Inception can be mapped to analysis stage of traditional development life cycle process and transition refers to security assurance stage before deployment whereas construction phase is iterative process of security development.

KW - Development lifecycle

KW - Risks

KW - Security

KW - Threats

KW - Vulnerabilities

KW - Web application

UR - http://www.scopus.com/inward/record.url?scp=85008256556&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85008256556&partnerID=8YFLogxK

U2 - 10.1109/RoEduNet.2016.7753243

DO - 10.1109/RoEduNet.2016.7753243

M3 - Conference paper

AN - SCOPUS:85008256556

SN - 9781509053995 (Print on demand)

SP - 1

EP - 6

BT - Networking in Education and Research

PB - IEEE, Institute of Electrical and Electronics Engineers

CY - United States

T2 - 15th RoEduNet Conference

Y2 - 7 September 2016 through 9 September 2016

ER -

Secure paradigm for web application development

Abstract

Conference

Access to Document

Other files and links

Fingerprint

Cite this