Jaatun, Martin Gilje; Cruzes, Daniela Soares; Tøndel, … - In: International Journal of Secure Software Engineering (IJSSE) 8 (2017) 4, pp. 1-30
When working with software security in a risk-centric way, development projects become equipped to make decisions on … authors found that their software security practices were not based on an assessment of software security risks, but rather …