Empirical Study on Secure Software Development

The integration of security into the software development process, through the Security Software Development Life Cycle (SSDLC), involves continuous efforts from individuals and practices that ensure application confidentiality, integrity, and availability. For critical applications or those handling sensitive information, security measures must be thoughtfully planned and meticulously managed at every stage of the software development lifecycle in order to maximize their effectiveness. The purpose of the paper is to study the implementation of this approach and how effective it is by examining students' projects and identifying the types of threats and vulnerabilities which they have discovered and fixed in their software course project systems. We have validated this approach by analyzing the results that students who are studying to become software engineers obtained after its application while designing their software projects.