Agility of security practices and agile process models: An evaluation of cost for incorporating security in agile process models

Agile process models are widely used today for software development. There has been an immense increase in use of agile methodologies due to their major focus on delivering working software and accommodating changes in requirements. However, use of agile methodologies for developing secure systems still poses many challenges. This research, addresses the issue of observing the effect on agility of process models while security practices are applied in them. An approach is proposed which calculates level of agility of six agile process models (XP, Scrum, FDD, ASD, DSDM, and Crystal) and security practices against four fundamental parameters of agility. When security practices are applied to process models they lower the degree of agility. We propose a method to see this effect based on factor of agility and also that the degree of agility of process model can be adjusted at desired level by including or excluding security practices.