Friday, September 29, 2017

Agile Application Security book

This is the first post in a while. I've been busy working on a bunch of projects. One of them is now finally complete: a book on Agile Application Security for O'Reilly, with Laura Bell, Michael Brunton-Spall, and Rich Smith.

In this book we try to build bridges between the security community and Agile teams, by taking advantage of our different experiences and viewpoints:

  • Rich's extensive experience as a pen tester, and running the security team at Etsy.
  • Michael's experience in hyperdrive Agile development, DevOps and security at The Guardian and the UK Digital Service.
  • Laura's work as a software developer and application security cat herder with large and small organizations in many different stages on their journeys to Agile adoption.
  • My work in development and operations in enterprise financial technology.

This is a unique book that looks at Agile from a security perspective, and security from an Agile perspective.

We explain the driving ideas and key problems in security, and the core enabling practices in Agile that help teams succeed, and how security programs can leverage Agile ideas and practices. How to deal with important risks and problems, and how to scale.

We look in detail at security practices and tools in an Agile context: threat and risk management, how to think about security in requirements, secure coding and code reviews, security testing in Continuous Integration and Continuous Deployment, what scanning can and cannot do for you, building hardened infrastructure and running secure systems, and putting all of this together into automated pipelines and feedback loops.

We also step through regulatory compliance and how to achieve continuous compliance; and how to get value from working with outsiders, including auditors, pen testers and bug bounty programs. We end with how to build an agile security culture and how to break down walls between engineers and security.

It was a unique opportunity to work with experts around the world: Michael in the UK, Laura in New Zealand, Rich in the US. Challenging, exhausting, and a great learning experience.

Our hope is that it offers value to developers who work in Agile environments and are new to security; to people in the security community who want to understand how security can keep up with high-velocity Agile and DevOps teams; and even to people who are expert in both.

35 comments:

Rithi Rawat said...

Very nice post here thanks for it .I always like and such a super contents of these post.Excellent and very cool idea and great content of different kinds of the valuable information's.

Machine learning training in chennai
machine learning with python course in chennai
machine learning course in chennai
best training insitute for machine learning

IT Tutorials said...

Really useful information. Thank you so much for sharing.It will help everyone.Keep Post. RPA training in chennai | RPA Uipath training in chennai | RPA training in Chennai with placement

Roja Priya said...

Thank you for sharing your article. Great efforts put it to find the list of articles which is very useful to know, Definitely will share the same to other forums.

best openstack training in chennai | openstack certification training in chennai | linux openstack training in chennai | openstack training in chennai | Openstack certification course in chennai | best Openstack certification training in chennai | openstack course fees in chennai | openstack certification in chennai

amsa leka said...

Nice blog..! I really loved reading through this article. Thanks for sharing such a
amazing post with us and keep blogging... best angularjs training institute in chennai | angularjs training in omr | angular 4 training in chennai | angularjs training in omr

S Happy said...

Nice post. It is really interesting. Thanks for sharing.
Hotels in Tuticorin, Hotels in Thoothukudi, Best Hotel in Tuticorin

sasireka said...

Well researched article and I appreciate this. The blog is subscribed and will see new topics soon.

angularjs online training

apache spark online training

informatica mdm online training

devops online training

aws online training

ProPlus Logics said...

Hey Nice Blog!! Thanks For Sharing!!!Wonderful blog & good post.Its really helpful for me, waiting for a more new post. Keep Blogging!
SEO company in coimbatore
SEO company
web design company in coimbatore

priya said...

Resources like the one you mentioned here will be very useful to me ! I will post a link to this page on my blog. I am sure my visitors will find that very useful
Microsoft Azure online training
Selenium online training
Java online training
Python online training
uipath online training

IELTS Coaching in Dwarka said...

I feel happy about and learning more about this topic. keep sharing your information regularly for my future reference. This content creates new hope and inspiration within me. Thanks for sharing an article like this. the information which you have provided is better than another blog.
Best IELTS Coaching in Dwarka

Java application development said...

I have perused your blog its appealing and noteworthy. I like it your blog.
java software development company
Java web development company
Java development companies
java development services
Java application development services

Aravinth said...


Nice Blog..... Keep Update.......

machine maintenance software in chennai
erp in chennai
erp software in chennai
erp providers

Anonymous said...




Awesome and unique information blog. Thanks for sharing....
PROLIFIC HOME REMODELING PLANS FOR YOUR DREAM HOUSE!.
PROLIFIC HOME REMODELING PLANS FOR YOUR DREAM HOUSE! Having a good home is a dream of many people but having a perfect home is all about choice. It can be really intimidating especially if you are looking for some good Home renovation and for this, you have to find the courage to explore new things and develop creative ideas in order build a dream house for your family because this is the thing which your guest will look when they enter your home. So, for this, it is very important to build a good renovation strategy and plan to get the best out of it. You have to pull all your ideas together and use all the power tools for decorating your place.
PROLIFIC HOME REMODELING PLANS FOR YOUR DREAM HOUSE!.



jenifer irene said...

I read the post and I have really enjoyed your blogs posts. Looking for the next post.
aviation institute in Chennai
Air Hostess Training Institute in Chennai
Airline Courses in Chennai
airport ground staff training in Chennai
Aviation Academy in Chennai
air hostess training in Chennai
airport management courses in Chennai
ground staff training in Chennai

cynthiawilliams said...

I feel happy to see your webpage and looking forward for more updates.
Machine Learning course in Chennai
Machine Learning Training in Chennai
Data Science Course in Chennai
Data Science Classes in Chennai
R Training in Chennai
R Programming Training in Chennai
Data Science Training in Velachery
Data Science Course in Anna Nagar

dockerandkubernetes said...


Nice Posting !! Thanks for sharing..
Docker Training in Hyderabad
Docker and Kubernetes Online Training
Docker Training
Docker Online Training
Kubernetes Online Training
Kubernetes Training in Hyderabad
Best Docker and kubernetes training in ameerpet
Docker and Kubernetes Training in Hyderabad

Anonymous said...

Bermain dengan tidak terduga. Jika sebelumnya anda bermain dengan berhati-hati, mulai lah bermain dengan agresif seperti menggertak lawan. Setelah itu kembali lagi bermain santai
asikqq
http://dewaqqq.club/
http://sumoqq.today/
interqq
pionpoker
bandar ceme terbaik
betgratis
paito warna terlengkap
forum prediksi

Katetechnologies said...

Thank you for your post. This is useful information.
Here we provide our special one's.
Java Internships in hyderabad
Testing companies in kphb
salesforce website developer in kphb
php jobs in gachibowli

BrnInfotech said...

Thanks for your valuable information,here we also provide some special one's
IPhone Job oriented Course in bangalore
lphone training in Hyderabad
Best iOS Training in Hyderabad

luckys said...

english to malayalam typing

Unknown said...

Nice article admin thanks for share your atricle keep share your knowledge i am waiting for your new post check hi vis jacket girls knee high socks kindly review and reply me

Essays SOS said...

Detail information about Agile Application Security book is relevant one. Hope that all readers will enjoyed it a lot. Thanks for sharing this valuable points here. Best Essay Writing Service

SkolarSolutions said...

Nice Post. To get study abroad in any course. For students who is looking for study medicine in abroad, we will help with end to end services with zero cost.
Skolarrssolutions
Mbbs in Russia
Mbbs in UK
Mbbs in Malaysia

Aruna Ram said...


Awesome! Thanks for sharing such beautiful information with us. I trust you will share some more new ideas about this topic. Please keep sharing!
Spark Training in Chennai
Spark Training Academy
Oracle Training in Chennai
Soft Skills Training in Chennai
JMeter Training in Chennai
Tableau Training in Chennai
Unix Training in Chennai
Social Media Marketing Courses in Chennai
Spark Training in Thiruvanmiyur
Spark Training in Tambaram

manjuragul said...

Very nice post with lots of information. Thanks for sharing this updates.
AngularJS Training in Anna Nagar
Angularjs Training in Chennai
AngularJS Training in OMR
RPA Training in T Nagar
Selenium Training in anna nagar
AngularJS Training in T Nagar
ccna Training in OMR
Tally Course in OMR

Reshma said...


Your post is very useful for me.Thanks for sharing your great post. Keep updating like this.....
Selenium Training in Velachery
Selenium Training in Tambaram
Selenium Training in T nagar
Selenium Training in Anna nagar
Selenium Training in Porur
Selenium Training in Adyar
Selenium Training in Vadapalani
Selenium Training in Thiruvanmiyur
Selenium Training in OMR

Pardeep Mengi said...

Usually I never comment on blogs but your article is so convincing that I never stop myself to say something about it. You’re doing a great job Man,Keep it up.
best overseas education consultants in delhi

ankit said...


It is very nice article on that topic. I was looking for something like which is interesting and knowledgeable. Do you know that Agrawal Construction Company has the most amazing townships, especially <a href="https://agrawalconstruction.com >best Builders In Bhopal</a>, with the name Sagar Green Hills. It is located in the lap of nature.

IT Tutorials said...


Get the most advanced Hadoop Course by Professional expert. Just attend a FREE Demo session.
call us @ 9884412301 | 9600112302
Hadoop training in chennai | Hadoop training in velachery

Quickbooks Payroll said...

Nice Article. We are authorised support partner in Quickbooks Payroll. If you required any help for Quickbooks Payroll Support Phone Number 1-800-986-4607 if you are Expand your business to a new hike, with progressive approach. Seeking for the best accounting software? Then, get quickbooks installed in your system. The software proves to be more profitable to the business.

ramesh said...

It is very nice article on that topic. I was looking for something like which is interesting and knowledgeable. Do you know that Agrawal Construction Company has the most amazing townships, especially top Builders In Bhopal, with the name Sagar Green Hills. It is located in the lap of nature

DevOps said...

Your information was very clear. Thank you for sharing.
DevOps Online Training

Hadoop Training said...

I Got Job in my dream company with decent 12 Lacks Per Annum salary, I have learned this world most demanding course out there in the current IT Market from the Data Science course In Bangalore Providers who helped me a lot to achieve my dreams comes true. Really worth trying Instant Approval Blog Comments Sites

DevOps said...

Your information was very clear. Thank you for sharing.
DevOps Online Training

Bhanu sree said...

Your information was very clear. Thank you for sharing
Kubernetes Online Training
Docker Online Training

hookstefan said...

Awesome! I always use to read your blog. It is so much informative. Thanks
assignment writing service

Site Meter