SECURE

With the advent of cloud computing, more and more information data are outsourced to the public cloud for economic savings and ease of access. However, the privacy information has to be encrypted to guarantee the security. To implement efficient data utilization, search over encrypted cloud data has been a great challenge. The existing solutions depended entirely on the submitted query keyword and didn't consider the semantics of keyword. Thus the search schemes are not intelligent and also omit some semantically related documents. In view of the deficiency, as an attempt, we propose a semantic expansion based similar search solution over encrypted cloud data. Our solution could return not only the exactly matched files, but also the files including the terms semantically related to the query keyword. In the proposed scheme, a corresponding file metadata is constructed for each file. Then both the encrypted metadata set and file collection are uploaded to the cloud server. With the metadata set, the cloud server builds the inverted index and constructs semantic relationship library (SRL) for the keywords set. After receiving a query request, the cloud server first finds out the keywords that are semantically related to the query keyword according to SRL. Then both the query keyword and the extensional words are used to retrieve the files. The result files are returned in order according to the total relevance score. TPA is used to audit the rank and provide the accurate relevance score. Eventually, detailed security analysis shows that our solution is privacy-preserving and secure under the previous searchable symmetric encryption (SSE) security definition.

This study explores the implementation of secure software development practices in the hybrid agile software development lifecycle. Hybrid agile is a mixture of plan-driven development approaches with agile methodology. Hybrid Agile is known as costly methods to implement due to the high possibility of security breaches, an increase of attack and vulnerability, as well as the lack of software security practices by the software engineering team. Series of interviews are conducted to explore secure software development practices in a hybrid agile environment. The finding from this research shows that: i) organization used mixed of agile approaches and practices which lead to hybrid agile, ii) The supervisor or manager is the key person in enforcing the hybrid agile methods and practices in their organization, iii) Automated/manual tools assist the developer in executing secure software development, iv) Developers are lack training, and v) other factors such as developers’ perception, team or group influence, and clients or users priority.

A successful software application is written to achieve its intended function and ensure it offers a friendly user experience in a fully secure environment. Often, writing applications that meet all specified performance requirements is highly challenging. The key question is how does a program escape security flaws? Engineers are also less aware of security methods leading to usable applications, but are highly vulnerable to project-end security threats. Due to numerous development approach/process vulnerabilities, security problems are likely to arise while stressing the software's functional position, while many security concerns are overlooked during the process. Many engineers strive to improve security aspects by revisiting the work after completing the production process, In this Research article experimental analysis is carried out based on the data collected from SME’s in Bengaluru with help of qualtrics, It has been investigated the relationships between various variables considered for the study related to security aspects and their impact on SME’s . Sample size was 253 for the study.

This study explores the implementation of secure software development practices in the hybrid agile software development lifecycle. Hybrid agile is a mixture of plan-driven development approaches with agile methodology. Hybrid Agile is known as costly methods to implement due to the high possibility of security breaches, an increase of attack and vulnerability, as well as the lack of software security practices by the software engineering team. Series of interviews are conducted to explore secure software development practices in a hybrid agile environment. The finding from this research shows that: i) organization used mixed of agile approaches and practices which lead to hybrid agile, ii) The supervisor or manager is the key person in enforcing the hybrid agile methods and practices in their organization, iii) Automated/manual tools assist the developer in executing secure software development, iv) Developers are lack training, and v) other factors such as developers’ perception, team or group influence, and clients or users priority

Modern society is deeply and irreversibly dependent on software systems of remarkable scope and complexity in areas that are essential for preserving this way of life. The security and correct functioning of these systems are vital. Recognizing these realities, the U. S. Department of Homeland Security (DHS) National Cyber Security Division (NCSD) enlisted the resources of the Software Engineering Institute at Carnegie Mellon University to develop a curriculum for a Master of Software Assurance degree program and define transition strategies for implementation. In this article, the authors present an overview of the Master of Software Assurance curriculum project, including its history, student prerequisites and outcomes, a core body of knowledge, and curriculum architecture from which to create such a degree program. The authors also provide suggestions for implementing a Master of Software Assurance program.

In recent years the number of cyber attacks has greatly increased, as has their complexity and effect. Therefore, new evolving software development models are needed, helping to build safe software by default. To achieve this, examining and comparing safe software development models in detail is particularly important. This paper provides a study of the most common secure software models and introduces a new secure software methodology tailored to all current environments. In this Research article experimental analysis is carried out based on the data collected from SME’s in Bengaluru with help of qualtrics, It has been investigated the relationships between various variables considered for the study related to security aspects adopted in SME’s . Sample size was 253 for the study