Search

Background/Objectives Inclusion of security in software development from the initial design phase has not been consistently addressed by the software developers. As a result there is an abundance of software systems with weak security. The objective of this study is to find out factors influencing developer\'s intention to adopt secure software development practices. Methodology: This study is based on qualitative research methodology. Interviews were conducted from the professionals working at senior positions at Malaysian software development organization. All the interviews were first transcribed, as they were digitally recorded. Then transcribed data was analyzed in a way that all frequent words or repetitive concepts were highlighted, after which many similar or relevant concepts were grouped together and categorized as themes and sub themes. Findings: The data was analyzed using the thematic analysis method. The results revealed five main themes, whereas each main theme has subthemes. These subthemes are parameters to justify the main theme. Main themes were identified in the light of the interviewee\'s response. The main results include interviewee\'s demographic characteristics, and then the main themes identified include, Adoption of SSD practices, Influencing authorities, Motivating Factors, Attitude towards SSD, Hindrances / Issues towards SSD Adoption. Sub themes included: Security Culture, Change Management, Applications of SSD, Managers, Security Expert, Training, Incentives, Security Awareness, Performance Expectancy, Facilitating Conditions, Demographic Characteristics, Need to use SSD, No clear guidelines, Strict Project Timeline, Lack of Security knowledge. The overall interview results show that secure software development practices adoption level in most part of the software industry is not up to the satisfactory level. Novelty/Applications: This research explores the factors impeding theimplementation of the best security practices, and barriers to secure software development practices adoption. This study can be used as guideline to be followed for the implementation of secure software development practices in software industry.Keywords: Secure software development adoption; organizational factors; software developer intention; security development; software security

Agile software development methods can deliver quality software yet it perceived that adoption and acceptance of agile methods by the consumers has been lower in Pakistan. However, this research study proposes an extended model of technology acceptance to understand the perception of the potential software practitioner teams towards adoption and acceptance of agile methods in software development. The theoretical research framework in this study incorporates determinants such as productivity, awareness of agile methods, and customer collaboration along with latent factors perceived ease of use and perceived usefulness. It is intended that the systematic research framework of integrated factors would be supportive enough to adopt agile software development solutions in software industry of Pakistan.

Information and communication technology has become the integral part of education system. Worldwide different studies are being conducted to evaluate ICT for better performance. This study focused on assessing the general adoption, acceptance and usage of the information and communication technology by the academicians at the University of Sindh, Pakistan. Though many established models are available to assess acceptance and use of ICT, for this research Unified Theory of Acceptance and Use of Technology (UTAUT) is used with some external factor like Culture, Incentives, Perceived needs and Job Relevance. The research used mix method approach by distributing 200 survey questionnaires among the academic staff and in addition, used interview method for making survey results stronger. The results revealed that all the constructs have significant effect on academicians towards their intention to use ICT in their academic work, on other side it was also found that there is lack of ICT infrastructure as well as usability due to dependency of administrative work on manual system, Moreover lack of equipment’s found major hindrance in automated class environment.

Many approaches for modeling security requirements have been proposed, but software industry did not reach on an agreement on how to express security requirements in a system model or software architecture. The main objective of this perspective paper is to summarize the problem space of representation of security patterns when designing security requirements. Many security patterns are proposed in the literature to help the developers who lack expertise in security to implement it. Application of security patterns has been hindered by the fact that they lack directions for their implementation in a specific scenario. This paper presents a technique for using mitigation use cases for representing solution provided by security patterns. Different challenges and issues were identified related to the application of security patterns in industry

A global, immersive, invisible, ambient network-computing environment built through the continued proliferation of smart sensors, cameras, software, databases, and massive data centers in a world-spanning information fabric known as the Internet of Things. The idea is to live in connected world. Altogether varieties of connected objects from smart home appliances like televisions, laundry machines, thermostats, refrigerators to Industrial Internet of Things (IIoT) and Internet of Medical Things (IoMT) are going to conserve the potential of IoT connectivity in all paces of future smart world. However, it has high importance to preserve adherence of enormous benefits of IoT connectivity, which might lead to unseen security and privacy issues and vulnerabilities that will cause various malicious attacks including waterhole, ransomware, eavesdropping, and others to exploit the potential of smart objects. This paper will present and forecast advanced concepts for end-to end security and privacy issues in a highly distributed, heterogeneous and dynamic network of IoT devices, which may reveal a holistic approach of device identification, authentication, and management, security, and privacy concerns.

Information and Communication Technology (ICT) has changed the world scenario including business and economies. There are new opportunities and challenges for every country to produce knowledge oriented citizens. Driven by these changes, numerous higher education institutions around the world are integrating and adopting latest ICT tools to deliver quality education. However, the Effectiveness of a new technologies introduced in educational institution depends on acceptance and utilization by academicians in the academic institutions. Thus realizing the importance of ICT availability and adoption in developed countries, this research is aimed to understand and assess the ICT adoption in Pakistan. This study also focuses on fundamental literature to investigate the critical success factors and propose a model for ICT adoption by academicians of higher education institutions in Pakistan. The contribution of this research improves the quality of education system in developing countries by effectively utilizing ICT in higher education institutions.

This paper examines the manner in which audits would be conducted in the future and how technology has transformed and impacted the business processes of public, private sector entities and various organisations and the guidelines which need to be followed to ensure compliance with applicable laws and regulations. The tranperancy of financial statements is of paramount interest to shareholders and other significant stakeholders. This necessities that the financial statements are audited to acquire a certain level of confidence over the integrity of numbers and the validity of business rationale which thereby arises a need for auditor to be well equipped with all the tools and system essentials in carrying out an effective and efficient audit. Information Technology can act as an impediment or stimulant towards the achievement of the above discussed objective. Various organizations use automation tools and ERP applications which have become a vital cog in their internel control environment. Understanding by auditor of these automated controls is necessary to ensure that the they are well equipped with the requisite skills and have knowledge of all technological tweaks that would be required in the audit process of a complex structured entity. The primary function which can be performed by generalized audit software include customizing data in numrous ways to serve the distinct purpose. The audit teams obtain insights into latest developments and plan their procedures accordingly keeping in view the applicable professional standards.