SECURE SOFTWARE IMPLEMENTATION IN HYBRID AGILE DEVELOPMENT APPROACH

This study explores the implementation of secure software development practices in the hybrid agile software development lifecycle. Hybrid agile is a mixture of plan-driven development approaches with agile methodology. Hybrid Agile is known as costly methods to implement due to the high possibility of security breaches, an increase of attack and vulnerability, as well as the lack of software security practices by the software engineering team. Series of interviews are conducted to explore secure software development practices in a hybrid agile environment. The finding from this research shows that: i) organization used mixed of agile approaches and practices which lead to hybrid agile, ii) The supervisor or manager is the key person in enforcing the hybrid agile methods and practices in their organization, iii) Automated/manual tools assist the developer in executing secure software development, iv) Developers are lack training, and v) other factors such as developers' perception, team or group influence, and clients or users priority.