Skip to main content
SpringerLink
Log in

Playing Protection Poker for Practical Software Security

  • Conference paper
  • First Online:
Product-Focused Software Process Improvement (PROFES 2016)

Part of the book series: Lecture Notes in Computer Science ((LNPSE,volume 10027))

Abstract

Software security is about creating software that keeps performing as intended even when exposed to an active attacker. Secure software engineering is thus relevant for all software, not only security software. We describe Protection Poker, a tool for risk estimation to be used as part of the iteration planning meeting, and discuss some preliminary experiences.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 39.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Notes

  1. 1.

    e.g., a “sprint” in Scrum.

  2. 2.

    http://www.sintef.no/protection-poker.

  3. 3.

    http://collaboration.csc.ncsu.edu/laurie/Security/ProtectionPoker/.

References

  1. Williams, L., Meneely, A., Shipley, G.: Protection poker: the new software security game. IEEE Secur. Priv. 8(3), 14–20 (2010)

    Article  Google Scholar 

  2. Grenning, J.: Planning poker or how to avoid analysis paralysis while release planning. Hawthorn Woods: Renaissance Softw. Consult. 3, 1–3 (2002)

    Google Scholar 

  3. Moløkken-Østvold, K., Haugen, N.C., Benestad, H.C.: Using planning poker for combining expert estimates in software projects. J. Syst. Softw. 81(12), 2106–2117 (2008). Best papers from the 2007 Australian Software Engineering Conference (ASWEC 2007), Melbourne, Australia, 10–13 April 2007

    Article  Google Scholar 

Download references

Acknowledgment

This work was supported by the SoS-Agile: Science of Security in Agile Software Development project, funded by the Research Council of Norway, grant number 247678.

Author information

Authors and Affiliations

  1. Department of Software Engineering, Safety and Security, SINTEF ICT, 7465, Trondheim, Norway

    Martin Gilje Jaatun & Inger Anne Tøndel

Authors
  1. Martin Gilje Jaatun
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Inger Anne Tøndel
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Martin Gilje Jaatun .

Editor information

Editors and Affiliations

  1. Norwegian University of Science and Technology, Trondheim, Norway

    Pekka Abrahamsson

  2. Fraunhofer Institute for Experimental Software Engineering, Kaiserslautern, Germany

    Andreas Jedlitschka

  3. and Technology, Norwegian University of Science and Technology, Trondheim, Norway

    Anh Nguyen Duc

  4. University of Innsbruck, Innsbruck, Austria

    Michael Felderer

  5. Okayama Prefectural University, Soja, Japan

    Sousuke Amasaki

  6. Tampere University of Technology, Tampere, Finland

    Tommi Mikkonen

Rights and permissions

Reprints and permissions

Copyright information

© 2016 Springer International Publishing AG

About this paper

Cite this paper

Jaatun, M.G., Tøndel, I.A. (2016). Playing Protection Poker for Practical Software Security. In: Abrahamsson, P., Jedlitschka, A., Nguyen Duc, A., Felderer, M., Amasaki, S., Mikkonen, T. (eds) Product-Focused Software Process Improvement. PROFES 2016. Lecture Notes in Computer Science(), vol 10027. Springer, Cham. https://doi.org/10.1007/978-3-319-49094-6_55

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-49094-6_55

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-49093-9

  • Online ISBN: 978-3-319-49094-6

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation