Agile Development of Secure Web-Based Applications

• DOI: 10.4018/jitwe.2006040101
• Publication Date: 2011-02-15T18:57:42Z
• Authors: A. F. Tappenden; T. Huynh; J. Miller; A. Geras; M. Smith
• Keywords: Web application development; Code refactoring; Agile Unified Process; Unit testing; Application security; Web engineering

This article outlines a four-point strategy for the development of secure Web-based applications within an agile framework and introduces strategies to mitigate security risks commonly present in applications. The proposed includes representation requirements as test cases supported by open source tool FIT, deployment highly testable architecture allowing testing application at all levels, outlining extensive unit-testing HTTPUnit, introduction novel technique refactoring that transforms insecure working code into functionally equivalent code. Today, many are not secure, limited literature exists concerning use methods this domain. It is intention further discussions research regarding methodology