{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,21]],"date-time":"2026-04-21T01:10:23Z","timestamp":1776733823477,"version":"3.51.2"},"publisher-location":"New York, NY, USA","reference-count":26,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,8,26]],"date-time":"2019-08-26T00:00:00Z","timestamp":1566777600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,8,26]]},"DOI":"10.1145\/3339252.3340337","type":"proceedings-article","created":{"date-parts":[[2019,8,9]],"date-time":"2019-08-09T12:21:03Z","timestamp":1565353263000},"page":"1-8","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["The Security Intention Meeting Series as a way to increase visibility of software security decisions in agile development projects"],"prefix":"10.1145","author":[{"given":"Inger Anne","family":"T\u00f8ndel","sequence":"first","affiliation":[{"name":"Department of Computer Science, Norwegian University of Science and Technology (NTNU), Trondheim, Norway"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daniela Soares","family":"Cruzes","sequence":"additional","affiliation":[{"name":"SINTEF Digital Trondheim, Norway"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martin Gilje","family":"Jaatun","sequence":"additional","affiliation":[{"name":"SINTEF Digital Trondheim, Norway"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kalle","family":"Rindell","sequence":"additional","affiliation":[{"name":"SINTEF Digital Trondheim, Norway"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2019,8,26]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1016\/0749-5978(91)90020-T"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-54045-0_17"},{"key":"e_1_3_2_1_3_1","volume-title":"Onboarding new employees: Maximizing success","author":"Bauer Talya N","year":"2010"},{"key":"e_1_3_2_1_4_1","unstructured":"Paulo Caroli and Taina Caetano. 2015. Fun Retrospectives - Activities and ideas for making agile retrospectives more engaging. Leanpub Layton.  Paulo Caroli and Taina Caetano. 2015. Fun Retrospectives - Activities and ideas for making agile retrospectives more engaging. Leanpub Layton."},{"key":"e_1_3_2_1_5_1","volume-title":"Challenges and Experiences with Applying Microsoft Threat Modeling in Agile Development Projects. In 2018 25th Australasian Software Engineering Conference (ASWEC). IEEE, 111--120","author":"Cruzes Daniela Soares","year":"2018"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3190619.3190634"},{"key":"e_1_3_2_1_7_1","unstructured":"EU. 2016. Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation). L 119 (2016).  EU. 2016. Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation). L 119 (2016)."},{"key":"e_1_3_2_1_8_1","first-page":"22","article-title":"Planning poker or how to avoid analysis paralysis while release planning","volume":"3","author":"Grenning James","year":"2002","journal-title":"Hawthorn Woods: Renaissance Software Consulting"},{"key":"e_1_3_2_1_9_1","volume-title":"The Security Development Lifecycle","author":"Howard Michael"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"crossref","unstructured":"Martin Gilje Jaatun Karin Bernsmed Daniela S. Cruzes and Inger Anne T\u00f8ndel. 2019. Threat Modeling in Agile Software Development. In Exploring Security in Software Architecture and Design Michael Felderer and Riccardo Scandariato (Eds.). IGI Global.  Martin Gilje Jaatun Karin Bernsmed Daniela S. Cruzes and Inger Anne T\u00f8ndel. 2019. Threat Modeling in Agile Software Development. In Exploring Security in Software Architecture and Design Michael Felderer and Riccardo Scandariato (Eds.). IGI Global.","DOI":"10.4018\/978-1-5225-6313-6.ch001"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23318-5_7"},{"key":"e_1_3_2_1_12_1","volume-title":"Reusable Security Requirements for Healthcare Applications. In 2009 International Conference on Availability, Reliability and Security. 380--385","author":"Jensen J."},{"key":"e_1_3_2_1_13_1","first-page":"2860","article-title":"A review on factors influencing implementation of secure software development practices. World Academy of Science, Engineering and Technology, International Journal of Social, Behavioural, Educational","volume":"10","author":"Kanniah Sri Lakshmi","year":"2016","journal-title":"Economic, Business and Industrial Engineering"},{"key":"e_1_3_2_1_14_1","first-page":"2","article-title":"Secure Software Development Practice Adoption Model: A Delphi Study","volume":"10","author":"Kanniah Sri Lakshmi","year":"2018","journal-title":"Journal of Telecommunication, Electronic and Computer Engineering (JTEC)"},{"key":"e_1_3_2_1_15_1","volume-title":"Agile software requirements: lean requirements practices for teams, programs, and the enterprise","author":"Leffingwell Dean"},{"key":"e_1_3_2_1_16_1","unstructured":"Larry Maccherone. 2017. The DevSecOps Manifesto. https:\/\/medium.com\/continuous-agile\/the-devsecops-manifesto-94579e0eb716. (2017). Accessed: 2019-04-30.  Larry Maccherone. 2017. The DevSecOps Manifesto. https:\/\/medium.com\/continuous-agile\/the-devsecops-manifesto-94579e0eb716. (2017). Accessed: 2019-04-30."},{"key":"e_1_3_2_1_17_1","volume-title":"Software Security: Building Security In","author":"McGraw Gary","year":"2006"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2015.69"},{"key":"e_1_3_2_1_19_1","volume-title":"Decision making in the transtheoretical model of behavior change. Medical decision making 28, 6","author":"Prochaska James O","year":"2008"},{"key":"e_1_3_2_1_20_1","volume-title":"Handbook of health behavior research 1: Personal and social determinants","author":"Rogers Ronald W"},{"key":"e_1_3_2_1_21_1","volume-title":"Threat Modeling: Designing for Security","author":"Shostack Adam","year":"2014"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/REW.2017.54"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.4018\/IJSSE.2017100101"},{"key":"e_1_3_2_1_24_1","volume-title":"Daniela Soares Cruzes, and Martin Gilje Jaatun","author":"T\u00f8ndel Inger Anne","year":"2019"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00199-4_11"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.58"}],"event":{"name":"ARES '19: 14th International Conference on Availability, Reliability and Security","location":"Canterbury CA United Kingdom","acronym":"ARES '19"},"container-title":["Proceedings of the 14th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3339252.3340337","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3339252.3340337","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:44:17Z","timestamp":1750203857000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3339252.3340337"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,8,26]]},"references-count":26,"alternative-id":["10.1145\/3339252.3340337","10.1145\/3339252"],"URL":"https:\/\/doi.org\/10.1145\/3339252.3340337","relation":{},"subject":[],"published":{"date-parts":[[2019,8,26]]},"assertion":[{"value":"2019-08-26","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}