Friday, September 29, 2017

Agile Application Security book

This is the first post in a while. I've been busy working on a bunch of projects. One of them is now finally complete: a book on Agile Application Security for O'Reilly, with Laura Bell, Michael Brunton-Spall, and Rich Smith.

In this book we try to build bridges between the security community and Agile teams, by taking advantage of our different experiences and viewpoints:

  • Rich's extensive experience as a pen tester, and running the security team at Etsy.
  • Michael's experience in hyperdrive Agile development, DevOps and security at The Guardian and the UK Digital Service.
  • Laura's work as a software developer and application security cat herder with large and small organizations in many different stages on their journeys to Agile adoption.
  • My work in development and operations in enterprise financial technology.

This is a unique book that looks at Agile from a security perspective, and security from an Agile perspective.

We explain the driving ideas and key problems in security, and the core enabling practices in Agile that help teams succeed, and how security programs can leverage Agile ideas and practices. How to deal with important risks and problems, and how to scale.

We look in detail at security practices and tools in an Agile context: threat and risk management, how to think about security in requirements, secure coding and code reviews, security testing in Continuous Integration and Continuous Deployment, what scanning can and cannot do for you, building hardened infrastructure and running secure systems, and putting all of this together into automated pipelines and feedback loops.

We also step through regulatory compliance and how to achieve continuous compliance; and how to get value from working with outsiders, including auditors, pen testers and bug bounty programs. We end with how to build an agile security culture and how to break down walls between engineers and security.

It was a unique opportunity to work with experts around the world: Michael in the UK, Laura in New Zealand, Rich in the US. Challenging, exhausting, and a great learning experience.

Our hope is that it offers value to developers who work in Agile environments and are new to security; to people in the security community who want to understand how security can keep up with high-velocity Agile and DevOps teams; and even to people who are expert in both.

81 comments:

Sam Smith said...

It is a great chance I had to read your amazing article for sure I have cached for future reading. Kindly keep updating us on new articles. Are you health conscious? Have you suffered from the negative effect of water quality? then Best Whole House Sediment Water Filter System is for you, For best experience in water purification.

Andrew303john said...

Finance Assignment Help

We at Fullassignment.com bring to you the most significant Finance assignment writing service at the best cost. With long stretches of understanding we are prepared to give assignment help over the globe.You will be guided here with a portion of the information of Finance assignment which could assist you in deciding writing a Finance assignment. Nonetheless we uneuqivocally prescribe you to benefit Managerial accounting assignment help from our specialist to find out about marketing and its scope.

https://fullassignment.com/

SoftHost said...

Você está procurando planos personalizados de hospedagem de janelas para o site da sua empresa? Em caso afirmativo, a Soft Host é uma empresa líder de Revenda Windowsem que sua pesquisa termina. Somos um provedor líder de hospedagem de janelas, que oferece planos ilimitados e acessíveis que podem combinar perfeitamente com suas necessidades e objetivos de negócios.

digitalmarketingcompanyinchennai said...

Good post... Now everything has become digital cause people want to get everything instantly Marketing also becomes easy and less cost which is called digital marketing.
digital marketing company, digital Marketing Agency in Chennai, SEO company in chennai

BATU said...

nice article very useful your post Thank you so much
https://www.educationseoblog.us.com/
https://www.nablusmarket.us.com/
https://www.bonggazo.us.com/
https://www.onlinecasinoind.us.com/
https://www.paperpleprod.us.com/

BATU said...

thanks for the great article to become a expert
https://www.proseositecheck.us.com/
https://www.royalpattaya.us.com/
https://www.sanjosonseo.us.com/
http://www.anellabackpack.us.com/
http://www.fakeyeeboost.us.com/

BATU said...

Amazing writing skills shown
http://www.swaroskioutletonline.us.com/
http://www.retina338.us.com/
http://www.balenciagaashoes.us.com/
http://www.timberlandtimeformen.us.com/
http://www.rimonaoutlet.us.com/

Steve James said...

Ascent is an experienced and self-determining Alternative Investment Fund Administrator, providing tailored solutions for different fund segments such as private equity funds, Hedge funds, and unit trust funds.

assignmentauthors said...

Quality services has been a major choice of action by various institutions and organization both governmental and non-governmental. product description writer

Unknown said...

If you're looking to lose weight then you need to jump on this totally brand new custom keto meal plan diet.

To create this keto diet service, licensed nutritionists, fitness trainers, and cooks have joined together to provide keto meal plans that are efficient, suitable, cost-efficient, and delightful.

From their first launch in January 2019, thousands of individuals have already transformed their figure and health with the benefits a professional keto meal plan diet can offer.

Speaking of benefits: clicking this link, you'll discover 8 scientifically-proven ones provided by the keto meal plan diet.

Quicken support said...

When you update your bank account in Quicken, at that point of time there is a chance of encountering Quicken Error cc-503. To learn how to solve it, simply read the blog-post. We have put much effort to provide easy guide so you can effortlessly annihilate.
Quicken Error OL-293-A
Quicken Error OL-294-A
Quicken error OL--1-B
quicken error ol-221-a|
Quicken Error CC-502

Euni said...

Thank you for bringing to a halt my long search topic. I really benefited from your content. If you are experiencing trouble striking a balance between your busy academic life and handling your online classes, you can get help from a professional who will take online classes on your behalf. It doesn’t matter the kind of help you need, whether it is passing your exam, finishing your assignments or even the entire classwork, you can get help here at Online Class Help .

Dona Hadley said...

Excellent article. Very interesting to read. I really love to read such a nice article. Thanks! keep rocking. We also provide college-level accounting help. Hire our experts for getting accounting and homework done. Kindly visit our site my accounting.

hulucomactivateroku said...

Adding the Hulu app on Roku
Follow the specified guidelines to add the Hulu app on Roku:
Initially, select the Roku channel store using the enhanced remote and explore through it to find out where Hulu is present
Secondly, you must type the channel's name in the search box and add the channel to your account after you choose the "Add channel" option
As the streaming service gets added, it is essential that the Hulu activation process can be done by using the Hulu activation code
Avail this service for a trial period and get the job done in a short time.

For more of your queries on Hulu Activation on Roku visit +1-844-885-8900.

Ryan phillip said...

Almost everyone who loves to stream a lot of content knows that Amazon Fire TV stick is one of the most delicate devices ever available in the digital arena. PBS is one such channel on Amazon that is notable for its programs that involve toddlers. Known by the name “Public Broadcasting corporation,” it is known to be one of the largest networks in the USA. Streaming this channel in the Amazon Fire TV Stick would resemble a bolt from the sky as children can get to know what education looks like in real. Instead of making academics too dull and exhausted, PBS kids follow its approach and empowers young minds through cartoons and games! For more info on PBS Kids on Amazon Firestick call us at +1-844-879-5200

Kevin Rudy said...


If you want to install McAfee antivirus through mcafee.com/activate, you can call live antivirus professionals to get full guidance for it. Our antivirus experts have the great skills for installing McAfee antivirus through mcafee.com/activate product key. Our helpline number is the suitable option for you to get instant support or quality help.

Steve James said...


Known as the ideal Corporate Solutions Provider in this industry, we focus to render the best services to our customers. Our professionals are extremely skilled and knowledgeable. In addition to this, we provide cost-effective services and amazing results.

QuickBooks Help said...

When you try to access a web-page from the QuickBooks program, QuickBooks Script Error occurs. This needs to be resolved sooner as script error in QuickBooks hindering your work-flow. In this guide, you will get an effective idea to deal with this problem.
quickbooks update error 15215
quickbooks update error 15270
QuickBooks Error 6000
quickbooks install diagnostic tool
QuickBooks error 12007

karthickannan said...

very nice.....
coronavirus update
inplant training in chennai
inplant training
inplant training in chennai for cse
inplant training in chennai for ece
inplant training in chennai for eee
inplant training in chennai for mechanical
internship in chennai
online internship



Arunvijay said...

Nice..
Coronavirus Update
Intern Ship In Chennai
Inplant Training In Chennai
Internship For CSE Students
Online Internships
Internship For MBA Students
ITO Internship

Paari said...

Great

Paari said...

Great


Intern Ship In Chennai
Inplant Training In Chennai
Internship For CSE Students
Coronavirus Update
Online Internships
Internship For MBA Students
ITO Internship

DFS Services said...



Hi Everybody
I am new here this community. I like your article. I am working for DFS Services. we are best service provide.
thank you


security alarm
home security system india
ip camera
security alarm system

BC HOME GROUP said...

Hello Everyone ,
I am new here in this community.I am working BC HOME GROUP. we are best servics provid for this company.


visit us:-

townhouses for sale victoria bc
buy house victoria bc
new condos for sale victoria bc
victoria new condos for sale

Vardhan said...

Thanks for sharing such creative blog.
https://tubeteencam.com/user/googleadultseo
https://www.finditnowdirectory.com.au/profile/googleadultseo/
http://www.vedandtechs.com/users/googleadultseo
http://googleadultseo.com/blog/how-to-perform-effective-seo-for-adult-sites/
https://medium.com/@aaryan.smith/how-does-googles-penalty-removal-work-for-escort-websites-b9239038e88f
http://site-1786701-9982-7462.mystrikingly.com/blog/know-some-valuable-tips-to-market-your-escort-website
https://www.bloglovin.com/@aaryan27/how-to-find-best-seo-keywords-for-adult-website
https://aaryansmith.hatenablog.com/entry/Google_Algorithm_updates_for_Adult_Websites
http://www.imfaceplate.com/aaryansmith/link-building-strategies-2020-for-adult-websites

BestTrainingMumbai said...

What an extraordinary article!. I am bookmarking it to peruse it over again after work. It appears to be an exceptionally fascinating point to expound on.
SAP training in Kolkata
Best SAP training in Kolkata
SAP training institute in Kolkata

Anirban Ghosh said...

What a remarkable article!. I am bookmarking it to scrutinize it over again after work. It has all the earmarks of being an extraordinarily intriguing point to elucidate.
SAP training in Mumbai
Best SAP training in Mumbai
SAP training institute in Mumbai

Sam Smith said...

Hello there, great stuff you’ve shared here I will be checking regularly for more articles. But wait! When it becomes hard to manage your online assignment, availing Online Assignment Help is the best choice. Many students often fail to submit their assignment before deadlines and end up scoring low grades because they didn’t have enough time to write the assignment given on time and satisfactorily. Visit Assignment Help . for assistance.

Monnika Jacob said...

Agile Application Security is the best written book on application security testing. Application security testing is very necessary before launching the application. If you have any question about this, you can read more content here at cheap dissertation writing services.

Robert Charles said...

Great post.......Thanks for sharing this post.

Talk to the customer care executives with the free spirit if some kinds of issues stop you to make the necessary decisions.

netgear router customer service number
netgear router customer support number
netgear router customer care number
netgear router setup without modem
reset your Netgear router

Unknown said...

Hi Everybody
I am new here this community. I like your article. I am working for Qntime. we are best service provide.
We are providing useful information about the Popular Indian and International Celebrities & people who are in the news. Qntimes.com Wеbѕіtе’ѕ fосuѕ іѕ оn Сеlеbrіtіеѕ & Bollywood Stars Wiki, Wife, Age, Height, Girlfriend, Boyfriend, Real Facts, Movie List, Awards, Controversies, car collections, Favriots, Affairs, Family, About In, Biography & More, Nеwѕ, Gоѕѕір, еntеrtаіnmеnt, nеt wоrth аnd lіfе оf сеlеbrіtіеѕ.
Suhana Khan Age
Qntimes

TIC Academy said...

Great Blog. Thnaks.
SAP Training in Chennai
Java Training in Chennai
Software Testing Training in Chennai
.Net Training in Chennai
Hardware and Networking Training in Chennai
AWS Training in Chennai
Azure Training in Chennai
Selenium Training in Chennai
QTP Training in Chennai
Android Training in Chennai

DESERT SAFARI said...

Hello every one
I am new here for this group.
For the best deal (Shhhh…. Something special we are talking about) for desert safari tour, Contact Us. You can mail us or call us. We have some special offer running for a limited period of time. Avail your discount today!
Desert Safari
Desert Safari Dubai

Unknown said...

Hi Everybody
I am new here this community. I like your article. I am working for zpkerchips. we are best service provide.
We strive to provide the customers the lowest possible rate on Zynga chips, which makes us the best  poker chips seller across the internet.
zynga poker buy chips
discount zynga poker chips

augustwalker said...

Does your HP printer isn't working accurately? Is it out of nowhere goes disconnected and all of a sudden begins to toss a few blunders? In the event that you are experiencing every one of these issues with your HP printer, at that point from the dependable source, you have to refresh or re-download HP printer driver. At 123.com.setup you can get your ideal one driver as well as the whole most recent HP printer driver programming in an extremely quick manner. Simply enter the model number of your printer and snap on the inquiry catch. From that point forward, simply click on the download catch to begin downloading.

The Qb Payroll said...

Our QuickBooks experts are stick to its dedication providing round the clock assistance to the users.

QuickBooks Customer Service Number

Unknown said...

Hello every one
I am new here for this group.
I am new here this community. I like your article. I am working for Experts SEO India. we are best service provide.
Increase your business revenues: Our Best SEO Expert in India open the floodgates for your website from which the high valued and qualified leads enter and you can increase your business revenues with your services and products leverage offers and good quality.
Freelance SEO Expert India
Best SEO Expert in India 

SEO Consultant said...

Hire Best SEO Expert in India and Get affordable link building services from a freelance SEO consultant .
SEO Expert
SEO Expert in Jaipur

Vivegam said...

Looking for Adult advertising services to market your Adult Business, immediately connect with Adult SEO Champ.
https://www.adultseochamp.com/blog/amazing-benefits-of-custom-escort-web-design/
https://aaryansmith.hatenablog.com/entry/2020/07/06/172726
https://www.zintro.com/profile/zidf2153e0
https://www.csslight.com/profile/adult-seo-champ
https://www.phishtank.com/user.php?username=adultseochamp
https://www.feedsfloor.com/profile/adult-seo-champ
https://topsitenet.com/profile/adultseochamp/63049/
https://demodrop.com/adultseochamp
https://pastebin.com/u/adultseochamp
http://www.koinup.com/adultseochamp/skills/

Millionmakerscare said...

Hey Nice Blog!!
Thanks For Sharing!!! Nice blog & Wonderfull post. Its really helpful for me, waiting for a more new post. Keep on posting!


starting business
business ideas
small business ideas

sammer mark said...

Thanks for the post.
Get Best solutions for HP Laptop Speaker Crackling

Mataharibet88 said...

Situs Judi Online Indonesia
Situs Slot Online Indonesia
Situs Slot Online Terpercaya
Slot Online Terpercaya
Daftar Slot Online Indonesia
MPO Slot
Rumah Slot Online
Semua Situs Slot MPO
MPO Slot Online Terbaru
Situs Judi Slot Terpercaya

Anku said...

Very nice content. Great job.buy Instagram followers cheap | buy Instagram followers | instaHotStar

James Ian said...

This is the greatest articles I have come across on internet. Most nurses work and study at the same time which makes them lack time to work on their nursing papers. Nursing also covers a wide range of topics that need thorough research especially when students have nursing papers to work not. Do not fret when Do my Nursing Paper . is here. Our team of writers is skilled and knowledgeable in all nursing areas.

Sweet Water Dubai said...

Thanks For Sharing

disinfection services

stellabrown said...

Hi, I am stella brown I am reading your blog, It is amazing blog thanks for the sharing the blog. Allassignmentservices.com provide the Epidemiology Assignment Help such as a information about education for students queries. allassignmentservices also provide the Do my best assignment writing service. Students from different walks of life can afford our assignment help services as we are affordable. Moreover, our team of academic writers is highly efficient at their work.

Cristina Parker said...

Nice post! We customise the assessment development services provider items based on the curriculum model given in the client guidelines for the development or re-development of assessment items for any concept-field or qualification level.
content development services company
best copy editing services

Sweet Water Dubai said...

Thanks For Sharing this.

home sanitization dubai

Sweet Water Dubai said...

Dubai Municipality approved company, provides disinfection & sanitization services to ensure removal of 99% of virus & bacteria at home and commercial area.

disinfection services dubai

Social Media Marketing Company in Delhi said...

Thanks for sharing this marvelous post. I m very pleased to read this article .I enjoy this site – its so usefull and helpfull.

MS Dynamics said...

Thanks for sharing this blog. This article gives lot of information.
DevOps Training institute in Ameerpet
DevOps Training in Hyderabad
DevOps Project Training
DevOps Training in Ameerpet
DevOps Training institute in Hyderabad
DevOps Course in Hyderabad

Muhammad Azwar said...

Nice Post Also Check This Out
About Islam
Dynamic Movies

James Martin said...

Many aspirants face different types of issues to deal with their essays and assignments. For them, writing assignment help services are the right option. When you hire teachers, you are safe because the mentors are skilled in this field. They know how to deal with critical essays and complete it within the timeframe. If you are looking for the best Assignment Help or you need the top assignment experts for your assignment, you can u can get all the support here. We have a team of dedicated and professional staff who can give you a fruitful solution and help you get good grades

sammer mark said...

Thanks for sharing this information with us. Get simple and easy steps for printer and any other peripheral devices through our experts.
Simple Steps to Fix HP Scanner not working Issue
Make a Printer Available on a Wifi Network

nikhil reddy said...

Good Post! Thank you so much for sharing this pretty post, it was so good to read and useful to improve my knowledge as updated one, keep blogging

Data Science Training in Hyderabad

Hoarding Advertising Agencies Kolkata said...

Nice and interesting post. Thank You! For sharing such a great article, I like to read your information you have mentioned in this article are helpful for me.

Common QuickBooks Error said...

This is really very informative and helpful post, I really want to tell you thanks for this. And, to purchase antivirus for your system please visit our website.

sammer mark said...

Awesome post done by author.
Can I Setup HP Deskjet Ink Advantage 2135 All in one
Can I Fix Avg Installation Failure Code 0xe001f94e

PPT said...

Hi, this is a wonderful piece of writing. I want to say that a nursing professional portfolio is a must-have document for every nurse. It contains everything a nurse needs in their career. The idea is to collect everything and have it in one place to easily trace them whenever you need them. There are nursing students who finding compiling the documents and putting them in one place difficult and opt to look for help in a platform like Nursing Professional Portfolio . Luckily, we are always here to help.

Just Spiel said...

Hi, this is very helpful information for me, thanks for sharing keep posting.

United Airlines Booking

Anonymous said...

United Airlines Cheap Flights || United Airlines Reservations

Mercy Smith said...

Nice blog..
Are you want to book your flight tickets at United Airlines Booking, but worry about how to book then here you will get complete information, our customer service 24*7 available, if you face any issues then contact with our technical experts.

Sophia said...

Thanks for sharing this information you can easily book your flight tickets at united airlines reservations official site, we provide 24*7 customer service.

Packers And Movers Chennai said...

Packers and Movers Chennai Give Safe and Reliable ***Household Shifting Services in Chennai with Reasonable ###Packers and Movers Price Quotation. We Provide Household Shifting, Office Relocation, ✔ ✔ ✔ Local and Domestic Transportation Services, Affordable and Reliable Shifting Service Charges @ Packers And Movers Chennai

Agen Judi Online said...

paragonpoker
poker7club
pokercantik
seksipoker
zetapoker
unikpoker
pokermuara

Packers And Movers Jaipur said...

Get Packers and Movers Jaipur List of Top Reliable, 100% Affordable, Verified and Secured Service Provider. Get Free ###Packers and Movers Jaipur Price Quotation instantly and Save Cost and Time. Packers and Movers Jaipur ✔ ✔ ✔ Reviews and Compare Charges for household Shifting, Home/Office Relocation, ***Car Transportation, Pet Relocation, Bike SHifting @ Packers And Movers Jaipur

Epson Printer Error Code e-11 said...

Everything is very open with a precise description of the challenges. It was truly informative. Your site is useful. Thanks for sharing!

Packers And Movers Jaipur said...

Packers And Movers Pali
Packers And Movers Pratapgarh
Packers And Movers Pushkar
Packers And Movers Rajsamand
Packers And Movers Sawai Madhopur

Change Roadrunner Password said...


Everything is very open with a precise description of the challenges. It was truly informative. Your site is useful. Thanks for sharing!

Anonymous said...

Great blog thanks for share with us.
Best website development company in Lucknow.

Gilapoker said...

GILAPOKER
HEBATJUDI
BONUS POKER TERBESAR
CARA DEPOSIT POKER
CARA MENANG POKER
JACKPOT POKER ONLINE
BONUS NEW MEMBER
LOKETPOKER
LINK ALTERNATIF DEWAPOKER
POKER369

Sam Smith said...

Hey Nice article here. What CIPS assignment are you tackling now? Do you need CIPS assignment help? Frankly, most CIPS topics aren’t exactly rocket science. You’re either writing about cost reduction, setting KPIs, demand management, or conflict resolution. Maybe it’s a business process re-engineering (BPR) assignment. Read more on CIPS Tutors

Twinkle said...

Nice post. It is really interesting. Thanks for sharing the post!
Web Design Company in Tuticorin | Domain Name Registration In India
Web Design Company In India | Digital Marketing Company in India
PPC Services in India | SEO Company India
Bulk SMS Service in India | Social Media Marketing Company in India

Tableau Training in Hyderabad said...




Nice article and thanks for sharing with us. Its very informative




Tableau Training in Hyderabad

MEWAHGAMEs said...

Tips dan Trik Judi
darumabet
darumabet
slot online
situs rekomendasi
slot online
mewahbet
daftar mewahbet
mewahbet
mewahbet

Tableau Training in Hyderabad said...



Nice article and thanks for sharing with us. Its very informative



Tableau Training in Hyderabad

Happy Desert Safari said...

In term of tourism, the great City of Dubai is one of the World’s best places to visit. Despite being the neighbor of world busiest city, Evening desert safari successfully retains its charms, elegance, and beauty and is never overshadowed by the city of Dubai.

Steven Salvatore said...

How to download and install HP printer drivers from www hp com 123 setup? Switch on the HP printer and computer.

Lillian J. Turner said...

MyBlogger Club

Guest Posting Site

Best Guest Blogging Site

Guest Blogger

Guest Blogging Site

Amy Bella said...

Nice information. I’ve bookmarked your site, and I’m adding your RSS feeds to my Google account to get updates instantly.
india mobile app development
indian software developer

DEVID WARNER said...

An instruction manual for Printer 123 hp printer setup, driver download, software install, wireless setup, USB connection, and troubleshooting issues.

Site Meter