# Security Monitoring during Software Development:
## 3 Methodology
### Industrial Case Study
#### 1.2.2 Focus Group  
After gathering information from the participants through the 2-step survey, a focus group was organized. The purpose of the focus group was to initiate an open discussion with the participants, based mainly on the contents of the questionnaire and their responses, in order to gain a better understanding of their view with respect to the discussed topics \begin{table}
\begin{tabular}{l l} \hline \hline
**ID** & **Question** \\ \hline \multicolumn{3}{c}{**Part 1—Demographics**} \\ \hline
**Q1.1** & What is your role in the company? \\ \hline
**Q1.2** & How many years of experience do you have in this position? \\ \hline \multicolumn{3}{c}{**Part 2—Adopted Security Activities and Further Needs**} \\ \hline
**Q2.1** & What type of security activities do you utilize during the development of software products within your company? \\ \hline
**Q2.2** & What re-active security countermeasures do you apply during the development of software products in your company? \\ \hline
**Q2.3** & What pro-active security countermeasures do you apply during the development of software products in your company? \\ \hline
**Q2.4** & Which of the following security countermeasures do you consider critical and that the company should invest more on them in the future? \\ \hline
**Q2.5** & Which of the following novel security monitoring activities do you consider interesting and with practical value in order to be included in their pipelines? \\ \hline \multicolumn{3}{c}{**Part 3—Important Security Aspects**} \\ \hline
**Q3.1** & How important is the characteristic of Confidentiality for a Software application (compared to the other characteristics)? \\ \hline
**Q3.2** & How important is the characteristic of Integrity for a Software application (compared to the other characteristics)? \\ \hline
**Q3.3** & How important is the characteristic of Availability for a Software application (compared to the other characteristics)? \\ \hline
**Q3.4** & How important is the characteristic of Authentication for a Software application (compared to the other characteristics)? \\ \hline
**Q3.5** & How important is the characteristic of Authorization for a Software application (compared to the other characteristics)? \\ \hline
**Q3.6** & How important is the characteristic of Security Compliance for a Software application (compared to the other characteristics)? \\ \hline \multicolumn{3}{c}{**Part 4—Critical Security Issues**} \\ \hline
**Q4.1** & According to your expertise, which Security Characteristics are significantly affected by Injection Issues? \\ \hline
**Q4.2** & According to your expertise, which Security Characteristics are significantly affected by Integer/Buffer Overflow Issues? \\ \hline
**Q4.3** & According to your expertise, which Security Characteristics are significantly affected by Cross-site Scripting (XSS)? \\ \hline
**Q4.4** & According to your expertise, which Security Characteristics are significantly affected by Null Pointer Dereference? \\ \hline
**Q4.5** & According to your expertise, which Security Characteristics are significantly affected by Weak Cryptography Issues? \\ \hline
**Q4.6** & According to your expertise, which Security Characteristics are significantly affected by Security Misconfiguration Issues? \\ \hline
**Q4.7** & According to your expertise, which Security Characteristics are significantly affected by Insufficient Logging? \\ \hline
**Q4.8** & According to your expertise, which Security Characteristics are significantly affected by the utilization of Vulnerable and Outdated Components? \\ \hline
**Q4.9** & According to your expertise, which Security Characteristics are significantly affected by Server-side Request Forgery (SSRF)? \\ \hline
**Q4.10** & According to your expertise, which Security Characteristics are significantly affected by Broken Authentication Issues? \\ \hline
**Q4.11** & According to your expertise, which Security Characteristics are significantly affected by Insecure Deserialization Issues? \\ \hline \end{tabular}
\end{table}