Challenges and Solutions for Addressing Software Security in Agile Software Development: A Literature Review and Rigor and Relevance Assessment

2. Related Work

A review published in 2013 (Ghani and Yasin, 2013) suggests that eXtreme Programming (XP) needs to be extended to include security practices, roles and guidelines to help build secure systems. The authors argue that XP already supports adoption of security-related practices. They give an example that pair-programming and coding standards are practices that can be useful for enhancing secure coding practices. On the other hand, it can also be argued that poor coding rules and practices can be a source of vulnerabilities (Liaqat et al., 2015).

There is evidence that integration of security into Feature-driven development (FDD) can be useful to IT organizations (Arbain et al., 2014). However, a systematic literature review published in 2014 found no frameworks or methods that apply or incorporate security for Feature-driven development (Arbain et al., 2014).