The objective of this thesis is to evaluate and improve SDLC and overall security of the YSoft AIVA system. The student will collaborate closely with the AIVA engineering teams to analyze, evaluate and propose improvements to the existing SDLC and particular practices, development guidelines and system components.

The thesis shall focus on the insider perspective, i.e. from the perspective of software engineers, product owners and other members of the AIVA teams. This thesis specifically is not meant to reliably harden the system against specific threats, rather to improve the execution of the software security as a discipline. It is however practical to demonstrate the application of the recommended techniques on particular security issues and their proposed mitigation.

The successful thesis should answer the following questions:
1. What are the key software security principles that should be implemented and followed by the AIVA engineering teams?
2. What are the most significant weaknesses of the AIVA systems (from the student's point of view) and why? How should these be addressed (short term) and prevented (long term)?
3. Which process frameworks, best practices and guidelines (preselected and reviewed byt the student) are recommended to the AIVA engineering teams and why?

The thesis should include a comprehensive study of the current state of the AIVA system by means of qualitative research with individual members and major stakeholders working on/with the AIVA system.