Survey on Secure Development of Applications

[Steven Sim Kok Leong]

Hi,

Hope you guys can help contribute to this research survey.

http://www.comp.nus.edu.sg/~ngyuenti/survey-issa.htm

This survey is conducted by Dr. Irene Woon and Ms. Ng Yuen Ting of Department of Information Systems, National University of Singapore.

The ISSA Singapore Chapter is collaborating with NUS for this online survey. For every completed member survey, NUS will contribute S$10 to the ISSA Singapore Chapter fund.

With this collaboration, ISSA Singapore Chapter hopes to contribute to local security research and also to use the fund to bring forth benefits to its members.

The purpose of this survey is to find out the factors that will motivate applications developers to practise secure development of applications (SDA). Practising SDA is to incorporate security as part of the application development lifecycle. It includes capturing security requirements during requirements gathering phase, designing security into applications, doing secure coding such as preventing buffer overflows and validating input and output etc, and testing for security vulnerabilities.

Steven Sim Kok Leong

[Robert-Jan Goossens · Accepted solution]

Hi,

Done.

Kind regards,
Robert-Jan

[H.Merijn Brand (procura]

I *do* see the importance of SDA, and I'm sure we will be using it one way or another in the near future, but currently we don't - at least not that we know of :)

I think we program safe and secure, but don't (yet) follow any predefined (SDA) rules.

Good luck with this.

For each of you, it'll take less than 5 minutes to complete. So help Steven.

Enjoy, Have FUN! H.Merijn

[Steven E. Protter]

Done.

The other radio button does not allow me to enter information.

The html is slighly broken but I liked the questions the survey asked.

SEP

[Steven Sim Kok Leong]

Thanks guys for your wonderful contribution to this research. Yuen Ting has asked me to would like to thank you for your comments.

I have hope that the research results will prove beneficial to the IT security community at large.

Steven Sim Kok Leong

[T G Manikandan]

Done.

Some questions are repeated in various forms.

With the Market looking for more Quality/zero defect levels this would be a good to follow.I think some of the SDA things are integrated with the QA process.

[Yogeeraj_1]

completed.

best regards
Yogeeraj

[Steven Sim Kok Leong]

Hi,

Back to top. Still need more responses. Thanks.

Steven Sim Kok Leong

[Stefan Farrelly]

Completed!

[Joseph Loo]

done.

anything for my alma mater.

[Sanjay Kumar Suri]

Completed!!!

Can we get more insight SDA? Since the current profile is managing HP-UX system, how to secure these systems!!!

sks

[Mark Grant]

Ok done, Interesting survey. I thought only one of the questions recognised that there is a difference between applications that are critical or confidential and those that are not particularly important.

I felt my answers would differ depending on the application being developed.

[V. Nyga]

Done

V.

[Steven Sim Kok Leong]

Thanks guys. Popping this back up.

Steven Sim Kok Leong

[Dave Hutton]

Finished it here.

[James Specht]

I have completed the survey.

--Jim

[Paula J Frazer-Campbell]

Hi


Done


Best wishes

Paula

[Steven Sim Kok Leong]

Hi,

Thanks. Back to top.

Steven Sim Kok Leong

[Jeroen Peereboom]

Done!

JP