Friday, November 8, 2013

Agile Appsec: Why we Suck at Building Secure Software, and what we can do about it

Last night I presented to the Calgary Agile Methods Users Group on "Agile Appsec: Why we Suck at Building Secure Software, and what we can do about it". This is an outline of the problems that we have as an industry building secure software - why we fail at it, why Agile development is blamed for insecure software - and what we can do to build more secure software while still being Agile. I look at different approaches to injecting application security into Agile development: security stories, evil user stories, abuse cases and abuse stories; security sprints; and building security into development, using Microsoft's SDL Agile as a guide.

6 comments:

Jessica Dodson said...

Be it 39% or 79%, a frighteningly large percentage of developer have little to no security steps in place when they are developing code. No wonder it sucks! Going back and trying to find the loopholes after they have been buried under more and more layers of new code is a tall order.

Anonymous said...

Going through the pain of Agile and application security. Great content in your presentation. Thanks for posting.

nandakishor said...

kingoroot app

kingoroot apk

kingoroot

kingoroot download

kingoroot for pc

kingoroot free download

kingoroot for android

kingroot old version

kingoroot latest version

kingoroot exe

https://kingoroot-app.com/

akhilapriya404 said...

Thanks you for sharing the article. The data that you provided in the blog is infromative and effectve. Through you blog I gained so much knowledge. Also check my collection at selenium Online Training

Hill said...


5 Wire Resistive Touch Screen

cityspideyseo said...

CitySpidey is India's first and definitive platform for hyper local community news, RWA Management Solutions and Account Billing Software for Housing Societies. We also offer air quaity index and residential soceity news of Noida, Dwarka, Indirapuram, Gurgaon and Faridabad. You can place advertisement for your business on city spidey.

Gate Management System
Society Management App
Society Management
rwa Management App
Neighbourhood Management App
Apartment Management App
Apartment Management System
Visitors Management System
Apartment Management Software
Air Quality Index, Air Pollution
Noida News
Gurgaon News
Ghaziabad News
Delhi News
Indirapuram News
Dwarka News

Site Meter