Friday, November 8, 2013

Agile Appsec: Why we Suck at Building Secure Software, and what we can do about it

Last night I presented to the Calgary Agile Methods Users Group on "Agile Appsec: Why we Suck at Building Secure Software, and what we can do about it". This is an outline of the problems that we have as an industry building secure software - why we fail at it, why Agile development is blamed for insecure software - and what we can do to build more secure software while still being Agile. I look at different approaches to injecting application security into Agile development: security stories, evil user stories, abuse cases and abuse stories; security sprints; and building security into development, using Microsoft's SDL Agile as a guide.

8 comments:

Jessica Dodson said...

Be it 39% or 79%, a frighteningly large percentage of developer have little to no security steps in place when they are developing code. No wonder it sucks! Going back and trying to find the loopholes after they have been buried under more and more layers of new code is a tall order.

Anonymous said...

Going through the pain of Agile and application security. Great content in your presentation. Thanks for posting.

siva said...

This blog is the general information for the feature. You got a good work for these blog.We have a developing our creative content of this mind.
Thank you for this blog. This for very interesting and useful.
Java training in Chennai
Java training in Bangalore
Java online training
Java training in Pune
Java training in Bangalore|best Java training in Bangalore

Peptide Synthesis said...

Thanks for providing such a great Information, you can see, we also provide
Peptide Synthesis

Digital Marketing Company in Delhi said...

I am always eager to catch hold of the new posts being published on your website, because of this i use to updated, thanks for sharing this wonderful article.
Digital Marketing Company in Delhi
SEO Company in Delhi
Mobile App Development Company in Lucknow

james said...

thanks and nice to see seo bangalore seo company pune

Stefan Carl said...

Find the best quality essay writing services NZ on Students assignment help.com. You can get instant write my essay services from our experts and you can skyrocket your grades and enhance your experience with Students assignment help.

hp support said...

Find the tips and tricks to install or uninstall HP support assistant Your Windows 10 Operating System. Read how to manage HP devices software and Driver update, troubleshooting hp driver.

HP Support Assistant is a free software tool for all hp users. It is a utility software program.HP Support Assistant is Built-in support for your PCs and printer. Find all the Driver update and troubleshooting Service for HP Devices.HP Assistant is an HP help that helps maintain PC performance and Hp Technical Support resolve problems.

HP Support Assistant is a HP System maintenance tool for HP laptops and desktops for increase the performance of system, updating drivers and troubleshooting hp devices software.

Follow these steps to download and install HP Support Assistant to your HP product. Download HP Support Assistant for your computer.Read How to download and Install Hp Support Assistant.Download HP Support Assistant 9 for Windows 10 Advance version of HP Assistant on PC.


Find the tips and tricks to install or uninstall HP support assistant on Your Windows 10 Operating System. Read how to manage HP devices software and Driver update, troubleshooting hp driver.

HP Support Assistant is a free software tool for all hp users. It is a utility software program.HP Support Assistant is Built-in support for your PCs and printer. Find all the Driver update and troubleshooting Service for HP Devices.HP Assistant is an HP help that helps maintain PC performance and Hp Technical Support resolve problems.What to Do When HP Support Assistant Not Working.

Site Meter