Desarrollo de una aplicación móvil utilizando una metodología de desarrollo de software seguro

Abstract

Abstract: This degree work focuses on a comparative analysis of three models of security for secure software development: Security Development Lifecycle (SDL), Comprehensive Lightweight Application Security Process (CLASP) and Open Software Assurance Maturity Model (OpenSAMM). The objective is to evaluate your strengths and weaknesses for the preparation of a comparative table and with the help of this it was possible to select the more appropriate approach, which allowed us to opt for SDL (Security Development Lifecycle). The SCRUM agile development methodology framework was integrated with the chosen methodology and with the tools that AWS offers us such as: APIS, Lambdas and database, we allowed us to create a guide to develop a mobile application with a development approach sure. Finally we built the Petfriend mobile application, proposed as a scenario for implementation to implement the chosen security model, allowing to guarantee the protection of sensitive user data.