Bridging the Security Gap in SDLC: Challenges and Solutions for Local IT Firms in Bangladesh
Year: 2025
Type: article
Abstract: Local IT companies in Bangladesh struggle to incorporate security measures throughout their software development processes. We surveyed 15 tech professionals from 14 different Bangladeshi firms—ranging from top executives to entry-level programmers—to understand their security challenges. Their responses revealed ongoing problems with SQL attacks, authentication weaknesses, and risks from external code libraries. Looking deeper it was found that many professionals know about security best practices; however, they rarely implement them effectively. Many companies seem to be merely checking compliance boxes rather than building genuinely secure systems. Current approaches rely heavily on traditional methods like code reviews and penetration testing, with newer techniques largely absent. To address these shortcomings, we suggest several budget-friendly approaches: using free automated testing tools, building security checks into development workflows, implementing no-cost multi-factor authentication, creating in-house security training programs, working with government agencies to develop better policies, and leveraging affordable cloud security options. Our findings offer practical guidance for Bangladeshi software companies looking to enhance security without breaking the bank.
Authors: Fatima Ibrahim, Youhana Ebnul Ashfaque, Md. Roknuzzaman, Merajul Islam, Sadia Jaman Sumi, Nujhat Nahar, Mahady Hasan
Institution: Independent University, Bangladesh
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W6921630692
FWCI:
Cites:
Cited by:
Related to: