2021/01/06 by Tiago Espinha Gasiba, Kristian Beckers, Gasiba, Tiago Espinha +5
Computer Science · #FOS: Computer and information sciences #Information and Cyber Security #Software Engineering (cs.SE) #Software Engineering Research #Software Engineering Techniques and Practices
paper · pdf · doi:10.48550/arxiv.2101.02100
openalex publication_date 2021/01/06 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
Teaching industry staff on cybersecurity issues is a fundamental activity\nthat must be undertaken in order to guarantee the delivery of successful and\nrobust products to market. Much research attention has been devoted to this\ntopic over the last years. However, the research which has been done has not\nfocused on developing secure code in industrial environments. In this paper we\ntake a look at the constraints and requirements for delivering a training, by\nmeans of cybersecurity challenges, that covers secure coding topics from an\nindustry perspective. Using requirements engineering, we aim at understanding\nthe design requirements for such challenges. Along the way, we give details on\nour experience of delivering cybersecurity challenges in an industrial setting\nand show the outcome and lessons learned. The proposed requirements for\ncybersecurity challenges geared towards software developers in an industrial\nenvironment are based on systematic literature review, interviews with security\nexperts from the industry and semi-structured evaluation of participant\nfeedback.\n