 ICACT20220194 Slide.01
[Big Slide]
[YouTube] |
Chrome  Click!! |
 |
Hi everyone. Our topic is “The Impact of the Practical Security Test during the Software Development Lifecycle”. |
| ICACT20220194 Slide.02
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
What is SSDLC? First, need to understand SDLC. SDLC stands for software development life cycle. It contains “requirement”,”design”, “coding”,”testing” , and “operation”. SSDLC means security base SDLC. That means we add security on each phase of the SDLC. |
| ICACT20220194 Slide.03
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
This page we mention the main security activities of the SSDLC phases. |
| ICACT20220194 Slide.04
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
On the Requirement Phase: Security strategy plan is needed to be done. On Design Phase will design the architecture. And Coding Phase, the software design is transfer to coding. |
| ICACT20220194 Slide.05
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
On Test Phase, we need to make sure no security vulnerabilities. On Operation Phase, we need to make sure operation properly. Here needs to do penetrate testing. |
| ICACT20220194 Slide.06
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
We are talking about the relative work and our contribution. |
| ICACT20220194 Slide.07
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
Due to the innovation of 5G architecture, open source is widely used under the software-defined everything architecture, software security is even more important. No matter on the standard organization or brand companies, they proposal some security standards and methodologies to make sure the product is secure. |
| ICACT20220194 Slide.08
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
We did some experiment and the conclusion are: When the users can perform the architecture risk analysis by using SCA tool in the requirement phase, the risk of using open source can be greatly reduced. If the architect can provide a secure architecture for the development to follow, the risk can also be greatly reduced. Requirement review, code review at each stage and the use of tools to assist in detection can assist to have a secure software product. |
| ICACT20220194 Slide.09
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
Evaluation |
| ICACT20220194 Slide.10
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
Here is the figure shows us “Software Development Life Cycle and Corresponding Security Testing”. |
| ICACT20220194 Slide.11
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
Here are the results for the SCA. It shows us the component issues, license issues, and operational issues. |
| ICACT20220194 Slide.12
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
Here are the results for the SCA as well. It shows us library issues. |
| ICACT20220194 Slide.13
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
This is so-called zero day. It uses re-assembly technology to figure our the issue which is bot reported to any security organization yet. |
| ICACT20220194 Slide.14
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
Conclusion and Future Work |
| ICACT20220194 Slide.15
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
Our conclusion are: In a software development life cycle process, in addition to have rigorous security requirements in the requirements phase, various security issues must be carried out at various stages. Figure out the problem and provide a guideline to prevent the security is very important.
Security Analysis and Testing can provide good qualities. |
| ICACT20220194 Slide.16
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
Our Future work will practice the SSLC on different domains and continue evaluate the impact of security issue. |
| ICACT20220194 Slide.17
[Big Slide]
[YouTube] |
Chrome Click!! |
 |
Thank you! |
