Técnicas e ferramentas de detecção de vulnerabilidades e sua relação com métodos ágeis e modelos de qualidade de software e serviços

• Lígia Cássia M. C. Santos Universidade de São Paulo
• Edmir Parada V. Prado Universidade de São Paulo
• Marcos Lordello Chaim Universidade de São Paulo

Resumo

Information systems need to be safe to achieve their goals. Thus, during development one needs to detect possible vulnerabilities present in the software. This paper aims to describe the use of vulnerability detection techniques and tools (VDTT) in complex environments and its relationship to software quality and service models in teams that use agile methods. To do so, a survey was carried out listing 18 techniques and tools that used three well-known processes of secure software development. The survey was applied to 76 members of agile software development teams who have already deployed, are in the process of deploying, or are going to deploy vulnerability detection techniques and tools in the projects. From the data collected, we were able describe the use of VDTT in complex development environments and associations between the adoption of software quality and service models and the use of VDTTs. For this purpose, Fischer's exact test was used to analyze and interpret the associations found.

Palavras-chave: Software Development, Vulnerability Detection, Agile Methods, Survey, methods and software qualityand service models