A Narrative Review of Factors Affecting the Implementation of Privacy and Security Practices in Software Development

Leysan Nurgalieva; Alisa Frik; Gavin Doherty

doi:10.1145/3589951

A Narrative Review of Factors Affecting the Implementation of Privacy and Security Practices in Software Development

Leysan Nurgalieva
, Alisa Frik
, Gavin Doherty

Department of Computer Science

Research output: Contribution to journal › Article › Scientific › peer-review

14 Citations (Scopus)

125 Downloads (Pure)

Abstract

Privacy and security are complex topics, raising a variety of considerations and requirements that can be challenging to implement in software development. Determining the security and privacy related factors that have an influence on software systems development and deployment project outcomes has been the focus of extensive and ongoing research over the past two decades. To understand and categorize the factors that have an impact on developers' adoption and implementation of privacy and security considerations and practices in software development, we carried out a narrative review of the literature. The resulting mapping of factors provides a foundation for future interventions targeting organizational and individual behavior change, to increase the adoption of privacy and security practices in software development.

Original language	English
Article number	320
Journal	ACM Computing Surveys
Volume	55
Issue number	14 S
DOIs	https://doi.org/10.1145/3589951
Publication status	Published - 17 Jul 2023
MoE publication type	A1 Journal article-refereed

Funding

This work received funding in part from the EU Horizon 2020 research and innovation programme under the Marie Skłodowska-Curie grant agreement 754489, in part from Science Foundation Ireland grant 13/RC/2094 and co-funded under the European Regional Development Fund through the Southern & Eastern Regional Operational Progamme to Lero—the Irish Software Research Centre (www.lero.ie), and in part by a grant from the Center for Long-Term Cybersecurity (CLTC) at U.C. Berkeley, by National Science Foundation grants v and CNS-1528070, and by the National Security Agency’s Science of Security program. Opinions, findings, and conclusions are those of the authors and do not necessarily reflect the views of the funders.

Keywords

design
Privacy
security
software teams

Access to Document

10.1145/3589951

A Narrative Review of Factors Affecting the Implementation of Privacy and Security Practices in Software DevelopmentFinal published version, 530 KBLicence: CC BY

Cite this

@article{92d7db80ff9c4a289321bc90f03a29e8,

title = "A Narrative Review of Factors Affecting the Implementation of Privacy and Security Practices in Software Development",

abstract = "Privacy and security are complex topics, raising a variety of considerations and requirements that can be challenging to implement in software development. Determining the security and privacy related factors that have an influence on software systems development and deployment project outcomes has been the focus of extensive and ongoing research over the past two decades. To understand and categorize the factors that have an impact on developers' adoption and implementation of privacy and security considerations and practices in software development, we carried out a narrative review of the literature. The resulting mapping of factors provides a foundation for future interventions targeting organizational and individual behavior change, to increase the adoption of privacy and security practices in software development.",

keywords = "design, Privacy, security, software teams",

author = "Leysan Nurgalieva and Alisa Frik and Gavin Doherty",

note = "Funding Information: This work received funding in part from the EU Horizon 2020 research and innovation programme under the Marie Sk{\l}odowska-Curie grant agreement 754489, in part from Science Foundation Ireland grant 13/RC/2094 and co-funded under the European Regional Development Fund through the Southern \& Eastern Regional Operational Progamme to Lero—the Irish Software Research Centre (www.lero.ie), and in part by a grant from the Center for Long-Term Cybersecurity (CLTC) at U.C. Berkeley, by National Science Foundation grants v and CNS-1528070, and by the National Security Agency{\textquoteright}s Science of Security program. Opinions, findings, and conclusions are those of the authors and do not necessarily reflect the views of the funders. Publisher Copyright: Copyright {\textcopyright} 2023 held by the owner/author(s).",

year = "2023",

month = jul,

day = "17",

doi = "10.1145/3589951",

language = "English",

volume = "55",

journal = "ACM Computing Surveys",

issn = "0360-0300",

publisher = "ACM",

number = "14 S",

}

TY - JOUR

T1 - A Narrative Review of Factors Affecting the Implementation of Privacy and Security Practices in Software Development

AU - Nurgalieva, Leysan

AU - Frik, Alisa

AU - Doherty, Gavin

N1 - Funding Information: This work received funding in part from the EU Horizon 2020 research and innovation programme under the Marie Skłodowska-Curie grant agreement 754489, in part from Science Foundation Ireland grant 13/RC/2094 and co-funded under the European Regional Development Fund through the Southern & Eastern Regional Operational Progamme to Lero—the Irish Software Research Centre (www.lero.ie), and in part by a grant from the Center for Long-Term Cybersecurity (CLTC) at U.C. Berkeley, by National Science Foundation grants v and CNS-1528070, and by the National Security Agency’s Science of Security program. Opinions, findings, and conclusions are those of the authors and do not necessarily reflect the views of the funders. Publisher Copyright: Copyright © 2023 held by the owner/author(s).

PY - 2023/7/17

Y1 - 2023/7/17

N2 - Privacy and security are complex topics, raising a variety of considerations and requirements that can be challenging to implement in software development. Determining the security and privacy related factors that have an influence on software systems development and deployment project outcomes has been the focus of extensive and ongoing research over the past two decades. To understand and categorize the factors that have an impact on developers' adoption and implementation of privacy and security considerations and practices in software development, we carried out a narrative review of the literature. The resulting mapping of factors provides a foundation for future interventions targeting organizational and individual behavior change, to increase the adoption of privacy and security practices in software development.

AB - Privacy and security are complex topics, raising a variety of considerations and requirements that can be challenging to implement in software development. Determining the security and privacy related factors that have an influence on software systems development and deployment project outcomes has been the focus of extensive and ongoing research over the past two decades. To understand and categorize the factors that have an impact on developers' adoption and implementation of privacy and security considerations and practices in software development, we carried out a narrative review of the literature. The resulting mapping of factors provides a foundation for future interventions targeting organizational and individual behavior change, to increase the adoption of privacy and security practices in software development.

KW - design

KW - Privacy

KW - security

KW - software teams

UR - https://www.scopus.com/pages/publications/85168808164

U2 - 10.1145/3589951

DO - 10.1145/3589951

M3 - Article

AN - SCOPUS:85168808164

SN - 0360-0300

VL - 55

JO - ACM Computing Surveys

JF - ACM Computing Surveys

IS - 14 S

M1 - 320

ER -

A Narrative Review of Factors Affecting the Implementation of Privacy and Security Practices in Software Development

Abstract

Funding

Keywords

Access to Document

Other files and links

Fingerprint

Cite this