Test performance and security measurements in software development

Abstract

The main goal of the thesis was to study cyber security implementation in different software development frameworks with two different research methods. The first method was a survey aimed at industry supplemented by the second method, literary research answering the research question. The thesis was assigned by the Finnish Defense Forces Logistics Command, which utilized the results of the work in the software procurements bidding competitions. The research project proceeded by first discovering the sources, followed by a literature research based on the sources. The content of the survey aimed at industry was designed against a certain ICT architecture to support the findings of the literature research. The survey was conducted anonymously for domestic and foreign industries. The aim of the study was to build a situational awareness of how the industry sees secure software development and find alternative models for the secure software development framework. The research achieved the goals set by the Finnish Defence Forces, and the research clearly showed the facts received from the industry and the facts produced by the literature research. In conclusion, there are different methods for performing safe software development; however, there is no standardized model or standard, which would be applicable to every software development framework and every company’s quality system and processes.