The DOI matches its Crossref record; 47 of the 47 references it cites were found in a registry or an index.
Exploring software security approaches in software development lifecycle: A systematic mapping study
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“So in addition to the four inductively derived categories we complemented the thematic dimensions of the developing model with a DevSecOps lifecycle framework (MacDonald and Head, 2016), based on the established concept of the SDLC (Pothukuchi et al., 2023; Mohammed et al., 2017).”
From Identifying the primary dimensions of DevSecOps: A multi-vocal literature review (2024) · cites this paper as Mohammed et al., 2017
In the citing paper
“Mohammed et al. (2017) defines the main steps of the SDLC: Requirements, Design, Coding, Testing, Deployment, and Maintenance”
From Identifying the primary dimensions of DevSecOps: A multi-vocal literature review (2024) · cites this paper as Mohammed et al. (2017)
Citations
Cites
Software Security: Building Security In
McGraw, G. E. (2006) · Proceedings/Proceedings - International Symposium on Software Reliability Engineering · doi:10.1109/issre.2006.43 · Cited by 792
SecureUML: A UML-Based Modeling Language for Model-Driven Security
Lodderstedt, T., Basin, D., & Doser, J. (2002) · Lecture notes in computer science · doi:10.1007/3-540-45800-x_33 · Cited by 763
Eliciting security requirements with misuse cases
Sindre, G., & Opdahl, A. L. (2004) · Requirements Engineering · doi:10.1007/s00766-004-0194-4 · Cited by 731
UMLsec: Extending UML for Secure Systems Development
Jürjens, J. (2002) · Lecture notes in computer science · doi:10.1007/3-540-45800-x_32 · Cited by 711
Understanding and controlling software costs
BOEHM, B. W., & Papaccio, P. N. (1988) · IEEE Transactions on Software Engineering · doi:10.1109/32.6191 · Cited by 667
McGraw, G. E. (2004) · IEEE Security & Privacy · doi:10.1109/msecp.2004.1281254 · Cited by 547
A Survey on Shari’Ah Governance Practices in Malaysia, GCC Countries and the UKPreprint
Hasan, Z. (2011) · SSRN Electronic Journal · Cited by 452
A taxonomy of computer program security flaws
Landwehr, C. E., Bull, A. R., McDermott, J. P., & Choi, W. S. (1994) · ACM Computing Surveys · doi:10.1145/185403.185412 · Cited by 451
Eliciting security requirements by misuse cases
Sindre, G., & Opdahl, A. L. (2002) · doi:10.1109/tools.2000.891363 · Cited by 328
Exploiting Software: How to Break Code
Hoglund, G., & McGraw, G. E. (2004) · Cited by 305
A systematic review of security requirements engineering
Mellado, D., Blanco, C., Sanchez, L. E., & Fernández‐Medina, E. (2010) · Computer Standards & Interfaces · doi:10.1016/j.csi.2010.01.006 · Cited by 197
Graphical user interface (GUI) testing: Systematic mapping and repository
Banerjee, I., Nguyen, B. N., Garousi, V., & Memon, A. M. (2013) · Information and Software Technology · doi:10.1016/j.infsof.2013.03.004 · Cited by 168
Risk analysis in software design
Verdon, D., & McGraw, G. E. (2004) · IEEE Security & Privacy · doi:10.1109/msp.2004.55 · Cited by 142
Sound methods and effective tools for model-based security engineering with UML
Jürjens, J. (2005) · Proceedings/Proceedings - International Conference on Software Engineering · doi:10.1145/1062455.1062519 · Cited by 107
A systematic mapping study on practical approaches to teaching software engineering
Samary, M. M., Quispe, A., & Ochoa, S. F. (2014) · IEEE Frontiers in Education Conference (FIE) · doi:10.1109/fie.2014.7044277 · Cited by 90
Leveraging User Interactions for In-Depth Testing of Web Applications
Mcallister, S., Kirda, E., & Kruegel, C. (2008) · Lecture notes in computer science · doi:10.1007/978-3-540-87403-4_11 · Cited by 78
From the ground up: the DIMACS software security workshop
McGraw, G. E. (2003) · IEEE Security & Privacy · doi:10.1109/msecp.2003.1193213 · Cited by 73
Survey and analysis on Security Requirements Engineering
Salini, P., & Kanmani, S. (2012) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2012.08.008 · Cited by 67
Niazi, M., Ikram, N., Bano, M., Imtiaz, S., & Khan, S. U. (2013) · IET Software · doi:10.1049/iet-sen.2012.0136 · Cited by 64
Self-citationApplying a Security Requirements Engineering Process
Mellado, D., Fernández‐Medina, E., & Piattini, M. G. (2006) · Lecture notes in computer science · doi:10.1007/11863908_13 · Cited by 64
Tools for secure systems development with UML
Jürjens, J., & Shabalin, P. (2007) · International Journal on Software Tools for Technology Transfer · doi:10.1007/s10009-007-0048-8 · Cited by 61
Niazi, M. (2015) · Arabian Journal for Science and Engineering · doi:10.1007/s13369-015-1586-0 · Cited by 60
Self-citationOn the Secure Software Development Process: CLASP and SDL Compared
Grégoire, J., Buyens, K., Win, B. D., et al. (2007) · doi:10.1109/sess.2007.7 · Cited by 51
Suleiman, H., & Svetinović, D. (2012) · Requirements Engineering · doi:10.1007/s00766-012-0153-4 · Cited by 46
Mellado, D., Fernández‐Medina, E., & Piattini, M. G. (2008) · Computer Standards & Interfaces · doi:10.1016/j.csi.2008.03.004 · Cited by 45
UMLintr: a UML profile for specifying intrusions
Hussein, M., & Zulkernine, M. (2006) · doi:10.1109/ecbs.2006.70 · Cited by 44
Agile security testing of Web-based systems via HTTPUnit
Tappenden, A. F., Beatty, P., Miller, J., et al. (2006) · doi:10.1109/adc.2005.11 · Cited by 42
Challenges of project management in Global Software Development: Initial results
Niazi, M., Mahmood, S., Alshayeb, M., et al. (2013) · Science and Information Conference · Cited by 38
Self-citationKhan, S. U., Niazi, M., & Ahmad, R. (2009) · Proceedings - Asia Pacific Software Engineering Conference/Proceedings · doi:10.1109/apsec.2009.16 · Cited by 38
Self-citationQuantifying Security in Secure Software Development Phases
Khan, M. U., & Zulkernine, M. (2008) · doi:10.1109/compsac.2008.173 · Cited by 33
Sound Methods and Effective Tools for Model-based Security Engineering with UML
J, J. A. S. (2005) · Cited by 32
Khan, M. U., & Zulkernine, M. (2009) · doi:10.1109/compsac.2009.206 · Cited by 31
UML specification of access control policies and their formal verification
Koch, M., & Parisi-Presicce, F. (2006) · Software & Systems Modeling · doi:10.1007/s10270-006-0030-z · Cited by 29
Development of Agile Security Framework Using a Hybrid Technique for Requirements Elicitation
Sonia, S., & Singhal, A. (2011) · Communications in computer and information science · doi:10.1007/978-3-642-18440-6_22 · Cited by 28
Riaz, M., Slankas, J., King, J., et al. (2014) · Proceedings of the ... ACM-IEEE International Symposium on Empirical Software Engineering and Measurement/International Symposium on Empirical Software Engineering and Measurement · doi:10.1145/2652524.2652532 · Cited by 21
Software Security; A Vulnerability Activity Revisit
Hadavi, M. A., Shirazi, H. M., Sangchi, H. M., et al. (2008) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1109/ares.2008.200 · Cited by 20
Romero-Mariona, J., Ziv, H., & Richardson, D. J. (2008) · doi:10.1145/1454247.1454266 · Cited by 17
STS-Tool: Security Requirements Engineering for Socio-Technical Systems
Paja, E., Dalpiaz, F., & Giorgini, P. (2014) · Lecture notes in computer science · doi:10.1007/978-3-319-07452-8_3 · Cited by 15
Security Requirements Engineering Process for Web Applications
P.Salini, & Kanmani, S. (2012) · Procedia Engineering · doi:10.1016/j.proeng.2012.06.328 · Cited by 15
Hassan, R., Bohner, S., El-Kassas, S., et al. (2008) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1109/ares.2008.77 · Cited by 15
The ISDF Framework: Integrating Security Patterns and Best Practices
Alkussayer, A., & Allen, W. H. (2009) · Communications in computer and information science · doi:10.1007/978-3-642-02633-1_3 · Cited by 14
Security modeling for service-oriented systems using security pattern refinement approach
Memon, M., Menghwar, G. D., Depar, M. H., et al. (2012) · Software & Systems Modeling · doi:10.1007/s10270-012-0268-6 · Cited by 12
Using Testing Techniques for Vulnerability Detection in C Programs
Mammar, A., Cavalli, A. R., Jimenez, W., et al. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-24580-0_7 · Cited by 11
Tools for Secure Systems Development with UML: Security Analysis with ATPs
Jürjens, J., & Shabalin, P. (2005) · Lecture notes in computer science · doi:10.1007/978-3-540-31984-9_23 · Cited by 10
Security Requirements Management in Software Product Line Engineering
Mellado, D., Fernández‐Medina, E., & Piattini, M. G. (2009) · Communications in computer and information science · doi:10.1007/978-3-642-05197-5_18 · Cited by 6
Advances in Information Security and Its Application
Park, J. H., Lee, C., Wang, G., et al. (2009) · Communications in computer and information science · doi:10.1007/978-3-642-02633-1 · Cited by 5
Formality of the Security Specification Process: Benefits Beyond Requirements
Romero-Mariona, J., Ziv, H., & Richardson, D. J. (2010) · Proceedings of the ... Annual Hawaii International Conference on System Sciences/Proceedings of the Annual Hawaii International Conference on System Sciences · doi:10.1109/hicss.2010.212 · Cited by 2
Research works printed but not linked: 3
- McGraw, 2006
- McGraw, 2004
- Sindre, 2004, Eliciting security requirements with misuse cases, Requir. Eng., 10, 34, 10.1007/s00766-004-0194-4 · DOI
Cited by
Sorted by citations
Identifying the primary dimensions of DevSecOps: A multi-vocal literature review
Zhao, X., Clear, T., & Lal, R. (2024) · Journal of Systems and Software · doi:10.1016/j.jss.2024.112063 · Cited by 40
Metadata
- Authors
- Mohammed, N. M., Niazi, M., Alshayeb, M., & Mahmood, S.
- Affiliations
- King Fahd University of Petroleum and Minerals (SA)
- Corresponding author
- Niazi, Mahmood
- Venue
- Computer Standards & Interfaces
- Publisher
- Elsevier BV
- Published
- 2017-02
- Volume
- 50
- Pages
- 107-115
- ISSN
- 0920-5489 (ISSN-L)
- OpenAlex
- W2529133275
- Cited by
- 104
- References
- 47
- Citations by year
- 2026: 2 · 2025: 7 · 2024: 11 · 2023: 14 · 2022: 17 · 2021: 17 · 2020: 14 · 2019: 8 · 2018: 9 · 2017: 5
- FWCI
- 16.37
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- Computer Standards & Interfaces (publishedVersion)
- Funders
- King Fahd University of Petroleum and Minerals (IN141011)
- Topics
- Physical Sciences › Computer Science › Information Systems › Web Application Security Vulnerabilities
- Physical Sciences › Computer Science › Information Systems › Software Engineering Techniques and Practices
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Keywords
- software security, software development lifecycle, vulnerability detection, vulnerability reduction, static analysis, dynamic analysis, security requirements engineering
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
