Agile Software Security

•Download as PPT, PDF•

1 like•977 views

How can security assurance (SA) be applied in agile software development? This presentation discusses reasons for misalignment between agile and SA practices, as well as compatible or even mutually reinforcing techniques. The intuitive concept of evil user stories is explored, and the more wholesome and formal approach of Microsoft, SDL/Agile, is outlined.

Business

Outline ,[object Object],[object Object],[object Object],[object Object],[object Object]

Security assurance ,[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],K. Beznosov and P. Kruchten

Working software over comprehensive documentation

Deliver working software frequently Collective ownership of code

Deliver working software frequently Collective ownership of code Back to square one + =

3rd party ,[object Object],[object Object],[object Object]

Misaligned ,[object Object],[object Object],[object Object],[object Object]

Natural match ,[object Object],[object Object]

Works anyway ,[object Object],[object Object],[object Object]

Automatic ,[object Object],[object Object],[object Object]

Evil user stories ,[object Object],[object Object],[object Object],As an employee, I can search for other employees by their last name As an employee, I can alter the database by inserting an SQL search string

Disconnected stories “ User adds “&debug=true” to URL on any page, and receives debug information that discloses system configuration details.”

Missing stories ,[object Object],[object Object]

Security Development Lifecycle ,[object Object],[object Object],[object Object],[object Object],[object Object]

Summary ,[object Object],[object Object],[object Object]

Similar to Agile Software Security

Agnitio: its static analysis, but not as we know itSecurity BSides London

Application Security at DevOps Speed and Portfolio ScaleJeff Williams

Agile Software ArchitectureChris F Carroll

4.Security Assessment And Testingphanleson

Devops security-An Insight into Secure-SDLCSuman Sourav

Software Analytics: Data Analytics for Software Engineering and SecurityTao Xie

Security Best PracticesClint Edmonson

8 Patterns For Continuous Code Security by Veracode CTO Chris WysopalThreat Stack

Software Security Testingankitmehta21

How to Make a Unicorn: Finding Cybersecurity Talent in the Real World (Dallas)Franklin Mosley

Overcoming Security Challenges in DevOpsAlert Logic

AMI Security 101 - Smart Grid Security East 2011dma1965

What Every Developer And Tester Should Know About Software SecurityAnne Oikarinen

香港六合彩baoyin

Shaloo VermaShaloo Verma

Secure SDLC for Software Shreeraj Shah

[OPD 2019] Threat modeling at scaleOWASP

Build a complete security operations and compliance program using a graph dat...Erkang Zheng

Leverage DevOps & Agile Development to Transform Your Application Testing Pro...Deborah Schalm

Leverage DevOps & Agile Development to Transform Your Application Testing Pro...DevOps.com

Similar to Agile Software Security (20)

Agnitio: its static analysis, but not as we know it

Application Security at DevOps Speed and Portfolio Scale

Agile Software Architecture

4.Security Assessment And Testing

Devops security-An Insight into Secure-SDLC

Software Analytics: Data Analytics for Software Engineering and Security

Security Best Practices

8 Patterns For Continuous Code Security by Veracode CTO Chris Wysopal

Software Security Testing

How to Make a Unicorn: Finding Cybersecurity Talent in the Real World (Dallas)

Overcoming Security Challenges in DevOps

AMI Security 101 - Smart Grid Security East 2011

What Every Developer And Tester Should Know About Software Security

香港六合彩

Shaloo Verma

Secure SDLC for Software

[OPD 2019] Threat modeling at scale

Build a complete security operations and compliance program using a graph dat...

Leverage DevOps & Agile Development to Transform Your Application Testing Pro...

Recently uploaded

BEST ✨ Call Girls In Indirapuram Ghaziabad ✔️ 9871031762 ✔️ Escorts Service...noida100girls

7.pdf This presentation captures many uses and the significance of the number...Paul Menig

VIP Call Girls Pune Kirti 8617697112 Independent Escort Service PuneCall girls in Ahmedabad High profile

DEPED Work From Home WORKWEEK-PLAN.docxRodelinaLaud

Catalogue ONG NƯỚC uPVC - HDPE DE NHAT.pdfOrient Homes

Lucknow 💋 Escorts in Lucknow - 450+ Call Girl Cash Payment 8923113531 Neha Th...anilsa9823

VIP Call Girl Jamshedpur Aashi 8250192130 Independent Escort Service JamshedpurSuhani Kapoor

Tech Startup Growth Hacking 101 - Basics on Growth MarketingShawn Pang

Monthly Social Media Update April 2024 pptx.pptxAndy Lambert

Cash Payment 9602870969 Escort Service in Udaipur Call GirlsApsara Of India

A DAY IN THE LIFE OF A SALESMAN / WOMANIlamathiKannappan

GD Birla and his contribution in managementchhavia330

Insurers' journeys to build a mastery in the IoT usageMatteo Carbone

It will be International Nurses' Day on 12 MayNZSG

M.C Lodges -- Guest House in Jhang.Aaiza Hassan

Forklift Operations: Safety through CartoonsForklift Trucks in Minnesota

Call Girls Navi Mumbai Just Call 9907093804 Top Class Call Girl Service Avail...Dipal Arora

Yaroslav Rozhankivskyy: Три складові і три передумови максимальної продуктивн...Lviv Startup Club

VIP Kolkata Call Girl Howrah 👉 8250192130 Available With Roomdivyansh0kumar0

Ensure the security of your HCL environment by applying the Zero Trust princi...Roland Driesen

Recently uploaded (20)

BEST ✨ Call Girls In Indirapuram Ghaziabad ✔️ 9871031762 ✔️ Escorts Service...

7.pdf This presentation captures many uses and the significance of the number...

VIP Call Girls Pune Kirti 8617697112 Independent Escort Service Pune

DEPED Work From Home WORKWEEK-PLAN.docx

Catalogue ONG NƯỚC uPVC - HDPE DE NHAT.pdf

Lucknow 💋 Escorts in Lucknow - 450+ Call Girl Cash Payment 8923113531 Neha Th...

VIP Call Girl Jamshedpur Aashi 8250192130 Independent Escort Service Jamshedpur

Tech Startup Growth Hacking 101 - Basics on Growth Marketing

Monthly Social Media Update April 2024 pptx.pptx

Cash Payment 9602870969 Escort Service in Udaipur Call Girls

A DAY IN THE LIFE OF A SALESMAN / WOMAN

GD Birla and his contribution in management

Insurers' journeys to build a mastery in the IoT usage

It will be International Nurses' Day on 12 May

M.C Lodges -- Guest House in Jhang.

Forklift Operations: Safety through Cartoons

Call Girls Navi Mumbai Just Call 9907093804 Top Class Call Girl Service Avail...

Yaroslav Rozhankivskyy: Три складові і три передумови максимальної продуктивн...

VIP Kolkata Call Girl Howrah 👉 8250192130 Available With Room

Ensure the security of your HCL environment by applying the Zero Trust princi...