skip to main content
10.1145/3661167.3661208acmotherconferencesArticle/Chapter ViewAbstractPublication PageseaseConference Proceedingsconference-collections
extended-abstract

Adapting to Change: Software Project Management in the Era of Security in Cloud Computing

Published: 18 June 2024 Publication History

Abstract

Nowadays cloud systems are becoming increasingly important, and at the same time, there is a need to ensure the security of those systems that pose specific problems. There is the lack of adequate skills and knowledge to deal with the complexity and challenges determined by security in cloud systems, particularly skills related to project management. This research aims to investigate the software project management issues and challenges in the design, development, maintenance, and operation of cloud systems while ensuring adequate security, understanding best practices to address them. The ultimate goal of the research is to create a framework that offers practical recommendations to enhance overall project understanding and support project managers in managing projects and programs related to the security of cloud systems.

References

[1]
Roaa Al Nafea and Mohammed Amin Almaiah. 2021. Cyber security threats in cloud: Literature review. In 2021 international conference on information technology (ICIT). IEEE, 779–786.
[2]
Borka Jerman Blažič. 2021. The cybersecurity labour shortage in Europe: Moving to a new concept for education and training. Technology in Society 67 (2021), 101769. https://doi.org/10.1016/j.techsoc.2021.101769
[3]
Peter M Chisnall. 1996. Qualitative Interviewing: The Art of Hearing Data. Journal of the Market Research Society 38, 4 (1996), 553–555.
[4]
Ana Faizi, Ali Padyab, and Andreas Naess. 2022. From rationale to lessons learned in the cloud information security risk assessment: a study of organizations in Sweden. Information & Computer Security 30, 2 (2022), 190–205.
[5]
Vahid Garousi, Michael Felderer, and Mika V Mäntylä. 2019. Guidelines for including grey literature and conducting multivocal literature reviews in software engineering. Information and software technology 106 (2019), 101–121.
[6]
Helen Heath and Sarah Cowley. 2004. Developing a grounded theory approach: a comparison of Glaser and Strauss. International journal of nursing studies 41, 2 (2004), 141–150.
[7]
Siw Elisabeth Hove and Bente Anda. 2005. Experiences from conducting semi-structured interviews in empirical software engineering research. In 11th IEEE International Software Metrics Symposium (METRICS’05). IEEE, 10–pp.
[8]
Enrique Larios-Vargas, Omar Elazhary, Soroush Yousefi, Derek Lowlind, Michael L. W. Vliek, and Margaret-Anne Storey. 2023. DASP: A Framework for Driving the Adoption of Software Security Practices. IEEE Trans. Softw. Eng. 49, 4 (apr 2023), 2892–2919. https://doi.org/10.1109/TSE.2023.3235684
[9]
Marsh McLennan. 2021. The Global Risks Report 2021 16th Edition. World Economic Forum Cologny, Switzerland.
[10]
Håvard Myrbakken and Ricardo Colomo-Palacios. 2017. DevSecOps: a multivocal literature review. In Software Process Improvement and Capability Determination: 17th International Conference, SPICE 2017, Palma de Mallorca, Spain, October 4–5, 2017, Proceedings. Springer, 17–29.
[11]
Kai Petersen, Robert Feldt, Shahid Mujtaba, and Michael Mattsson. 2008. Systematic mapping studies in software engineering. In 12th international conference on evaluation and assessment in software engineering (EASE). BCS Learning & Development.
[12]
Kai Petersen, Sairam Vakkalanka, and Ludwik Kuzniarz. 2015. Guidelines for conducting systematic mapping studies in software engineering: An update. Information and software technology 64 (2015), 1–18.
[13]
Daryl C Plummer, Thomas J Bittman, Tom Austin, David W Cearley, and David Mitchell Smith. 2008. Cloud computing: Defining and describing an emerging phenomenon. Gartner, June 17 (2008), 1–9.
[14]
Roshan N. Rajapakse, Mansooreh Zahedi, M. Ali Babar, and Haifeng Shen. 2022. Challenges and solutions when adopting DevSecOps: A systematic review. Information and Software Technology 141 (2022), 106700. https://doi.org/10.1016/j.infsof.2021.106700

Index Terms

  1. Adapting to Change: Software Project Management in the Era of Security in Cloud Computing

    Recommendations

    Comments

    Information & Contributors

    Information

    Published In

    cover image ACM Other conferences
    EASE '24: Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering
    June 2024
    728 pages
    ISBN:9798400717017
    DOI:10.1145/3661167
    Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

    Publisher

    Association for Computing Machinery

    New York, NY, United States

    Publication History

    Published: 18 June 2024

    Check for updates

    Author Tags

    1. Cloud Computing
    2. Security
    3. Software Project Management

    Qualifiers

    • Extended-abstract
    • Research
    • Refereed limited

    Conference

    EASE 2024

    Acceptance Rates

    Overall Acceptance Rate 71 of 232 submissions, 31%

    Contributors

    Other Metrics

    Bibliometrics & Citations

    Bibliometrics

    Article Metrics

    • 0
      Total Citations
    • 65
      Total Downloads
    • Downloads (Last 12 months)65
    • Downloads (Last 6 weeks)17
    Reflects downloads up to 05 Mar 2025

    Other Metrics

    Citations

    View Options

    Login options

    View options

    PDF

    View or Download as a PDF file.

    PDF

    eReader

    View online with eReader.

    eReader

    HTML Format

    View this article in HTML Format.

    HTML Format

    Figures

    Tables

    Media

    Share

    Share

    Share this Publication link

    Share on social media