{"id":"https://openalex.org/W2915005630","doi":"https://doi.org/10.1109/desec.2018.8625114","title":"OWASP Risk Analysis Driven Security Requirements Specification for Secure Android Mobile Software Development","display_name":"OWASP Risk Analysis Driven Security Requirements Specification for Secure Android Mobile Software Development","publication_year":2018,"publication_date":"2018-12-01","ids":{"openalex":"https://openalex.org/W2915005630","doi":"https://doi.org/10.1109/desec.2018.8625114","mag":"2915005630"},"language":"en","primary_location":{"id":"doi:10.1109/desec.2018.8625114","is_oa":false,"landing_page_url":"https://doi.org/10.1109/desec.2018.8625114","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE Conference on Dependable and Secure Computing (DSC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102803079","display_name":"Kai Qian","orcid":"https://orcid.org/0000-0002-2112-1819"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kai Qian","raw_affiliation_strings":["College of Computing and Software Engineering, Kennesaw State University, Marietta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computing and Software Engineering, Kennesaw State University, Marietta, GA, USA","institution_ids":["https://openalex.org/I172980758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087589295","display_name":"Reza M. Parizi","orcid":"https://orcid.org/0000-0002-0049-4296"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Reza M. Parizi","raw_affiliation_strings":["College of Computing and Software Engineering, Kennesaw State University, Marietta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computing and Software Engineering, Kennesaw State University, Marietta, GA, USA","institution_ids":["https://openalex.org/I172980758"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085923839","display_name":"Dan Lo","orcid":"https://orcid.org/0000-0003-4396-0370"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dan Lo","raw_affiliation_strings":["College of Computing and Software Engineering, Kennesaw State University, Marietta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computing and Software Engineering, Kennesaw State University, Marietta, GA, USA","institution_ids":["https://openalex.org/I172980758"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I172980758"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"2"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9825000166893005,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12799","display_name":"Mobile and Web Applications","score":0.9679999947547913,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7419295310974121},{"id":"https://openalex.org/keywords/security-bug","display_name":"Security bug","score":0.6145525574684143},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6041907072067261},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.5876505374908447},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.5661466717720032},{"id":"https://openalex.org/keywords/application-security","display_name":"Application security","score":0.5608651041984558},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.5220770239830017},{"id":"https://openalex.org/keywords/systems-development-life-cycle","display_name":"Systems development life cycle","score":0.48972633481025696},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.48132407665252686},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.45765697956085205},{"id":"https://openalex.org/keywords/security-through-obscurity","display_name":"Security through obscurity","score":0.43070730566978455},{"id":"https://openalex.org/keywords/mobile-computing","display_name":"Mobile computing","score":0.4279828667640686},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.41667285561561584},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.3835202157497406},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.3824499845504761},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.3586559593677521},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.33136188983917236},{"id":"https://openalex.org/keywords/software-development-process","display_name":"Software development process","score":0.3217369318008423},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.23764193058013916},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09129977226257324}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7419295310974121},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.6145525574684143},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6041907072067261},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.5876505374908447},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.5661466717720032},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.5608651041984558},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.5220770239830017},{"id":"https://openalex.org/C120617098","wikidata":"https://www.wikidata.org/wiki/Q559486","display_name":"Systems development life cycle","level":5,"score":0.48972633481025696},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.48132407665252686},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.45765697956085205},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.43070730566978455},{"id":"https://openalex.org/C144543869","wikidata":"https://www.wikidata.org/wiki/Q2738570","display_name":"Mobile computing","level":2,"score":0.4279828667640686},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.41667285561561584},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.3835202157497406},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3824499845504761},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.3586559593677521},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.33136188983917236},{"id":"https://openalex.org/C180152950","wikidata":"https://www.wikidata.org/wiki/Q2904257","display_name":"Software development process","level":4,"score":0.3217369318008423},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.23764193058013916},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09129977226257324},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/desec.2018.8625114","is_oa":false,"landing_page_url":"https://doi.org/10.1109/desec.2018.8625114","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE Conference on Dependable and Secure Computing (DSC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":1,"referenced_works":["https://openalex.org/W2809397005"],"related_works":["https://openalex.org/W2155353733","https://openalex.org/W125279808","https://openalex.org/W4240401768","https://openalex.org/W2146455667","https://openalex.org/W2018644264","https://openalex.org/W2152250926","https://openalex.org/W2901968602","https://openalex.org/W4385770215","https://openalex.org/W896362041","https://openalex.org/W2135191468"],"abstract_inverted_index":{"The":[0],"security":[1,13,51,61,73,80,96,126,135,173],"threats":[2],"to":[3,19,40,48,156,168],"mobile":[4,36,116,140,172],"applications":[5],"are":[6],"growing":[7],"explosively.":[8],"Mobile":[9,108,132,159],"apps":[10,82,154],"flaws":[11],"and":[12,22,45,65,83,98,104,143],"defects":[14],"open":[15],"doors":[16],"for":[17,115,138],"hackers":[18],"break":[20],"in":[21,53,150],"access":[23],"sensitive":[24],"information.":[25],"Defensive":[26],"requirements":[27],"analysis":[28,128],"should":[29],"be":[30,164],"an":[31,165],"integral":[32],"part":[33],"of":[34,81,87,146],"secure":[35,153],"SDLC.":[37,151],"Developers":[38],"need":[39],"consider":[41],"the":[42,50,54,60,79,85,94,101,147,157],"information":[43],"confidentiality":[44],"data":[46,66],"integrity,":[47],"verify":[49],"early":[52],"development":[55,102,142],"lifecycle":[56],"rather":[57],"than":[58],"fixing":[59],"holes":[62],"after":[63],"attacking":[64],"leaks":[67],"take":[68],"place.":[69],"Early":[70],"eliminating":[71],"known":[72],"vulnerabilities":[74],"will":[75],"help":[76],"developers":[77,92],"increase":[78],"reduce":[84],"likelihood":[86],"exploitation.":[88],"However,":[89],"many":[90],"software":[91,117,141],"lack":[93],"necessary":[95,114],"knowledge":[97],"skills":[99],"at":[100],"stage,":[103],"that's":[105],"why":[106],"Secure":[107],"Software":[109],"Development":[110],"education":[111],"is":[112],"very":[113,170],"engineers.":[118],"In":[119],"this":[120],"paper,":[121],"we":[122],"propose":[123],"a":[124],"guided":[125],"requirement":[127],"based":[129],"on":[130],"OWASP":[131,158],"Top":[133,160],"ten":[134,161],"risk":[136],"recommendations":[137],"Android":[139],"its":[144],"traceability":[145],"developmental":[148],"controls":[149],"Building":[152],"immune":[155],"risks":[162],"would":[163],"effective":[166],"approach":[167],"provide":[169],"useful":[171],"guidelines.":[174]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}