Proposta de um modelo de ciclo de vida seguro de desenvolvimento de software. caso de estudo: CIUEM

Abstract

Since its genesis, software has become increasingly present in our lives, becoming an essential element in several areas, from communication to the automation of business processes. For the development of these software, several methodologies were created in order to make this development process more structured and flexible. The great deficit of traditional methodologies is the fact that they focus more on the delivery of features of the final product, often not prioritizing the security factor. The main objective of this study was to design a software development life cycle model, considering security aspects at the Centro de Informática da Universidade Eduardo Mondlane (CIUEM), that is, a model that introduces security tasks in all stages of the software lifecycle. This study comes at a time when cyber-attacks are gaining ground around the world, with organizations being harmed all the time. In order to achieve the aforementioned objective, various techniques were used, with emphasis on research of scientific material and direct observation techniques. Once the author was inserted in the place of study, it was possible to carry out practical tasks (for example, the analysis of vulnerabilities) that allowed the author to have a clear vision of the technological environment of the place of study, in order to propose a better solution for the identified problem. After compiling all the relevant information, a secure software development lifecycle model was proposed in accordance with the institution's reality, which promises not only to incorporate security into all phases of the software lifecycle, but also to make it a culture within the development team.