@inproceedings{5e4a9b19f2d644ee8e9496e23fa84f35,
title = "Security guidelines: Requirements engineering for verifying code quality",
abstract = "The development and delivery of secure software is a challenging task, that gets even harder when the developer tries to adhere to both application and organization-specific security requirements translated into security guidelines. These guidelines serve as best practices or recommendations that help reduce application exposure to vulnerabilities, and provide hints about the application's adherence to high-level and abstract security requirements. In this paper, we present guidelines we gathered from different sources, and we highlight the main issues related to the interpretation and application of those guidelines. We present a first attempt to classify the requirements with the objective of identifying the analysis that should be performed to verify the adherence of the developed software to each of the categories.",
keywords = "Development Lifecycle, Information flow, Security Guidelines",
author = "Zeineb Zhioua and Yves Roudier and Stuart Short and Ameur, \{Rabea Boulifa\}",
note = "Publisher Copyright: {\textcopyright} 2016 IEEE.; 24th IEEE International Requirements Engineering Conference Workshops, REW 2016 ; Conference date: 12-09-2016 Through 16-09-2016",
year = "2017",
month = jan,
day = "12",
doi = "10.1109/REW.2016.28",
language = "English",
series = "Proceedings - 2016 IEEE 24th International Requirements Engineering Conference Workshops, REW 2016",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "80--85",
booktitle = "Proceedings - 2016 IEEE 24th International Requirements Engineering Conference Workshops, REW 2016",
}