Prescriptive Security Framework for Managing risks and Quantifying Security in Software Development Practices

Cyber-attacks are regular occurrence on software which can lead to serious consequences such as exposure of vulnerable system data. Software Development Life Cycle (SDLC) strictly incorporates security specifically in final phase which makes the product vulnerable to security threats. The incorporation of security should be done from the initial phase of the SDLC but it is generally seen as an activity after development by most of the developers and companies. To address the security problems in SDLC multiple approaches are being developed which includes models, frameworks and methods. These approaches also improve the maturity and assurance level of the software. In this paper, we highlight various models for software development, and phases of development followed by SDLC. This paper also presents the security issues faced during the development of a software. It also analyses the frameworks, models and methods with SWOT parameters. Finally, we discuss the recent proposed ideas and changes about making a software secure.