Friday, September 29, 2017

Agile Application Security book

This is the first post in a while. I've been busy working on a bunch of projects. One of them is now finally complete: a book on Agile Application Security for O'Reilly, with Laura Bell, Michael Brunton-Spall, and Rich Smith.

In this book we try to build bridges between the security community and Agile teams, by taking advantage of our different experiences and viewpoints:

  • Rich's extensive experience as a pen tester, and running the security team at Etsy.
  • Michael's experience in hyperdrive Agile development, DevOps and security at The Guardian and the UK Digital Service.
  • Laura's work as a software developer and application security cat herder with large and small organizations in many different stages on their journeys to Agile adoption.
  • My work in development and operations in enterprise financial technology.

This is a unique book that looks at Agile from a security perspective, and security from an Agile perspective.

We explain the driving ideas and key problems in security, and the core enabling practices in Agile that help teams succeed, and how security programs can leverage Agile ideas and practices. How to deal with important risks and problems, and how to scale.

We look in detail at security practices and tools in an Agile context: threat and risk management, how to think about security in requirements, secure coding and code reviews, security testing in Continuous Integration and Continuous Deployment, what scanning can and cannot do for you, building hardened infrastructure and running secure systems, and putting all of this together into automated pipelines and feedback loops.

We also step through regulatory compliance and how to achieve continuous compliance; and how to get value from working with outsiders, including auditors, pen testers and bug bounty programs. We end with how to build an agile security culture and how to break down walls between engineers and security.

It was a unique opportunity to work with experts around the world: Michael in the UK, Laura in New Zealand, Rich in the US. Challenging, exhausting, and a great learning experience.

Our hope is that it offers value to developers who work in Agile environments and are new to security; to people in the security community who want to understand how security can keep up with high-velocity Agile and DevOps teams; and even to people who are expert in both.

59 comments:

Rithi Rawat said...

Very nice post here thanks for it .I always like and such a super contents of these post.Excellent and very cool idea and great content of different kinds of the valuable information's.

Machine learning training in chennai
machine learning with python course in chennai
machine learning course in chennai
best training insitute for machine learning

IT Tutorials said...

Really useful information. Thank you so much for sharing.It will help everyone.Keep Post. RPA training in chennai | RPA Uipath training in chennai | RPA training in Chennai with placement

Roja Priya said...

Thank you for sharing your article. Great efforts put it to find the list of articles which is very useful to know, Definitely will share the same to other forums.

best openstack training in chennai | openstack certification training in chennai | linux openstack training in chennai | openstack training in chennai | Openstack certification course in chennai | best Openstack certification training in chennai | openstack course fees in chennai | openstack certification in chennai

amsa leka said...

Nice blog..! I really loved reading through this article. Thanks for sharing such a
amazing post with us and keep blogging... best angularjs training institute in chennai | angularjs training in omr | angular 4 training in chennai | angularjs training in omr

S Happy said...

Nice post. It is really interesting. Thanks for sharing.
Hotels in Tuticorin, Hotels in Thoothukudi, Best Hotel in Tuticorin

sasireka said...

Well researched article and I appreciate this. The blog is subscribed and will see new topics soon.

angularjs online training

apache spark online training

informatica mdm online training

devops online training

aws online training

ProPlus Logics said...

Hey Nice Blog!! Thanks For Sharing!!!Wonderful blog & good post.Its really helpful for me, waiting for a more new post. Keep Blogging!
SEO company in coimbatore
SEO company
web design company in coimbatore

priya said...

Resources like the one you mentioned here will be very useful to me ! I will post a link to this page on my blog. I am sure my visitors will find that very useful
Microsoft Azure online training
Selenium online training
Java online training
Python online training
uipath online training

IELTS Coaching in Dwarka said...

I feel happy about and learning more about this topic. keep sharing your information regularly for my future reference. This content creates new hope and inspiration within me. Thanks for sharing an article like this. the information which you have provided is better than another blog.
Best IELTS Coaching in Dwarka

Java application development said...

I have perused your blog its appealing and noteworthy. I like it your blog.
java software development company
Java web development company
Java development companies
java development services
Java application development services

Aravinth said...


Nice Blog..... Keep Update.......

machine maintenance software in chennai
erp in chennai
erp software in chennai
erp providers

Anonymous said...




Awesome and unique information blog. Thanks for sharing....
PROLIFIC HOME REMODELING PLANS FOR YOUR DREAM HOUSE!.
PROLIFIC HOME REMODELING PLANS FOR YOUR DREAM HOUSE! Having a good home is a dream of many people but having a perfect home is all about choice. It can be really intimidating especially if you are looking for some good Home renovation and for this, you have to find the courage to explore new things and develop creative ideas in order build a dream house for your family because this is the thing which your guest will look when they enter your home. So, for this, it is very important to build a good renovation strategy and plan to get the best out of it. You have to pull all your ideas together and use all the power tools for decorating your place.
PROLIFIC HOME REMODELING PLANS FOR YOUR DREAM HOUSE!.



jenifer irene said...

I read the post and I have really enjoyed your blogs posts. Looking for the next post.
aviation institute in Chennai
Air Hostess Training Institute in Chennai
Airline Courses in Chennai
airport ground staff training in Chennai
Aviation Academy in Chennai
air hostess training in Chennai
airport management courses in Chennai
ground staff training in Chennai

cynthiawilliams said...

I feel happy to see your webpage and looking forward for more updates.
Machine Learning course in Chennai
Machine Learning Training in Chennai
Data Science Course in Chennai
Data Science Classes in Chennai
R Training in Chennai
R Programming Training in Chennai
Data Science Training in Velachery
Data Science Course in Anna Nagar

dockerandkubernetes said...


Nice Posting !! Thanks for sharing..
Docker Training in Hyderabad
Docker and Kubernetes Online Training
Docker Training
Docker Online Training
Kubernetes Online Training
Kubernetes Training in Hyderabad
Best Docker and kubernetes training in ameerpet
Docker and Kubernetes Training in Hyderabad

Anonymous said...

Bermain dengan tidak terduga. Jika sebelumnya anda bermain dengan berhati-hati, mulai lah bermain dengan agresif seperti menggertak lawan. Setelah itu kembali lagi bermain santai
asikqq
http://dewaqqq.club/
http://sumoqq.today/
interqq
pionpoker
bandar ceme terbaik
betgratis
paito warna terlengkap
forum prediksi

Katetechnologies said...

Thank you for your post. This is useful information.
Here we provide our special one's.
Java Internships in hyderabad
Testing companies in kphb
salesforce website developer in kphb
php jobs in gachibowli

BrnInfotech said...

Thanks for your valuable information,here we also provide some special one's
IPhone Job oriented Course in bangalore
lphone training in Hyderabad
Best iOS Training in Hyderabad

luckys said...

english to malayalam typing

Unknown said...

Nice article admin thanks for share your atricle keep share your knowledge i am waiting for your new post check hi vis jacket girls knee high socks kindly review and reply me

Essays SOS said...

Detail information about Agile Application Security book is relevant one. Hope that all readers will enjoyed it a lot. Thanks for sharing this valuable points here. Best Essay Writing Service

SkolarSolutions said...

Nice Post. To get study abroad in any course. For students who is looking for study medicine in abroad, we will help with end to end services with zero cost.
Skolarrssolutions
Mbbs in Russia
Mbbs in UK
Mbbs in Malaysia

Aruna Ram said...


Awesome! Thanks for sharing such beautiful information with us. I trust you will share some more new ideas about this topic. Please keep sharing!
Spark Training in Chennai
Spark Training Academy
Oracle Training in Chennai
Soft Skills Training in Chennai
JMeter Training in Chennai
Tableau Training in Chennai
Unix Training in Chennai
Social Media Marketing Courses in Chennai
Spark Training in Thiruvanmiyur
Spark Training in Tambaram

manjuragul said...

Very nice post with lots of information. Thanks for sharing this updates.
AngularJS Training in Anna Nagar
Angularjs Training in Chennai
AngularJS Training in OMR
RPA Training in T Nagar
Selenium Training in anna nagar
AngularJS Training in T Nagar
ccna Training in OMR
Tally Course in OMR

Reshma said...


Your post is very useful for me.Thanks for sharing your great post. Keep updating like this.....
Selenium Training in Velachery
Selenium Training in Tambaram
Selenium Training in T nagar
Selenium Training in Anna nagar
Selenium Training in Porur
Selenium Training in Adyar
Selenium Training in Vadapalani
Selenium Training in Thiruvanmiyur
Selenium Training in OMR

Pardeep Mengi said...

Usually I never comment on blogs but your article is so convincing that I never stop myself to say something about it. You’re doing a great job Man,Keep it up.
best overseas education consultants in delhi

ankit said...


It is very nice article on that topic. I was looking for something like which is interesting and knowledgeable. Do you know that Agrawal Construction Company has the most amazing townships, especially <a href="https://agrawalconstruction.com >best Builders In Bhopal</a>, with the name Sagar Green Hills. It is located in the lap of nature.

IT Tutorials said...


Get the most advanced Hadoop Course by Professional expert. Just attend a FREE Demo session.
call us @ 9884412301 | 9600112302
Hadoop training in chennai | Hadoop training in velachery

Quickbooks Payroll said...

Nice Article. We are authorised support partner in Quickbooks Payroll. If you required any help for Quickbooks Payroll Support Phone Number 1-800-986-4607 if you are Expand your business to a new hike, with progressive approach. Seeking for the best accounting software? Then, get quickbooks installed in your system. The software proves to be more profitable to the business.

ramesh said...

It is very nice article on that topic. I was looking for something like which is interesting and knowledgeable. Do you know that Agrawal Construction Company has the most amazing townships, especially top Builders In Bhopal, with the name Sagar Green Hills. It is located in the lap of nature

DevOps said...

Your information was very clear. Thank you for sharing.
DevOps Online Training

Hadoop Training said...

I Got Job in my dream company with decent 12 Lacks Per Annum salary, I have learned this world most demanding course out there in the current IT Market from the Data Science course In Bangalore Providers who helped me a lot to achieve my dreams comes true. Really worth trying Instant Approval Blog Comments Sites

DevOps said...

Your information was very clear. Thank you for sharing.
DevOps Online Training

Bhanu sree said...

Your information was very clear. Thank you for sharing
Kubernetes Online Training
Docker Online Training

hookstefan said...

Awesome! I always use to read your blog. It is so much informative. Thanks
assignment writing service

excelr43 said...

Here at this site really the fastidious material collection so that everybody can enjoy a lot.

machine learning course in malaysia

Bhanu sree said...

Your information was very clear. Thank you for sharing.
Docker Online Training
Docker Training in Hyderabad

zahid khan said...

I wanted to thank you for this great read. Your blog is one of the finest blogs . Thanks for posting this informative article.
app development company in bhopal
Top It companies in Bhopal
Companies in MPNagar Bhopal

chandrasekhar said...

Nice article
"Sanjary Academy provides excellent training for Piping design course. Best Piping Design Training Institute in Hyderabad,
Telangana. We have offer professional Engineering Course like Piping Design Course,QA / QC Course,document Controller
course,pressure Vessel Design Course, Welding Inspector Course, Quality Management Course, #Safety officer course."
Piping Design Course in India­
Piping Design Course in Hyderabad
Piping Design Course in Hyderabad
QA / QC Course
QA / QC Course in india
QA / QC Course in Hyderabad
Document Controller course
Pressure Vessel Design Course
Welding Inspector Course
Quality Management Course
Quality Management Course in india
Safety officer course

chandrasekhar said...

Thanks for sharing information
Yaaron Studios is one of the rapidly growing editing studios in Hyderabad. We are the best Video Editing services in Hyderabad. We provides best graphic works like logo reveals, corporate presentation Etc. And also we gives the best Outdoor/Indoor shoots and Ad Making services.
Best video editing services in Hyderabad,ameerpet
Best Graphic Designing services in Hyderabad,ameerpet­
Best Ad Making services in Hyderabad,ameerpet­

rosstaylor505 said...

his is my first time i visit here. I found so many entertaining stuff in your blog, especially its discussion. From the tons of comments on your articles, I guess I am not the only one having all the leisure here! Keep up the excellent work.
java software development company ukraine

dan said...

PayPal money adders (Test deposit available)

Payooner money adder

Bitcoinadder software (test trial version)

Freebitco.in hack

Buy Adsense account

Avast/ccleaner/ premium code

Oracle 10
NETELLER ADDER

DEBIT CARD LOADER

BANK ACCOUNT LOADER

CREDIT CARD LOADER

REMOVE WIX AD

CLONE CARDS

HACK ANY GMAIL ACCOUNT

HACK FACEBOOK ACCOUNT

Facebook hacking software's

Unblock a limited paypal account

LinkedIn email and password hacking

Ss7 available at normal price
Serious inquiries only
OR
Do you want to design or re-design your website to attract more customers? We provide high-quality web related services like:



· UI/UX and Web Design

· HTML/CSS Development

· Blog Design and RSS Integration

· Social Media Integration

· Content Development and Content Marketing

· Website Maintenance


Contact me
(dans62846@gmail.com)

dan said...

PayPal money adders (Test deposit available)

Payooner money adder

Bitcoinadder software (test trial version)

Freebitco.in hack

Buy Adsense account

Avast/ccleaner/ premium code

Oracle 10
NETELLER ADDER

DEBIT CARD LOADER

BANK ACCOUNT LOADER

CREDIT CARD LOADER

REMOVE WIX AD

CLONE CARDS

HACK ANY GMAIL ACCOUNT

HACK FACEBOOK ACCOUNT

Facebook hacking software's

Unblock a limited paypal account

LinkedIn email and password hacking

Ss7 available at normal price
Serious inquiries only
OR
Do you want to design or re-design your website to attract more customers? We provide high-quality web related services like:

· UI/UX and Web Design

· HTML/CSS Development

· Blog Design and RSS Integration

· Social Media Integration

· Content Development and Content Marketing

· Website Maintenance


Contact me
(dans62846@gmail.com)

kissasian said...

KissAsian is Asian Dramas Platform where you can find all Korean, Chinese, Japanese dramas.

Gogoanime | Watch gogo anime online, English anime online HD

Watch OnlineNewMovies Online Bollywood Movies Latest Hollywood Movies Online Hindi Movies Dubbed Movies Tamil Movies Download Latest new Movie

Get love Spell said...

This blog is honestly beneficial concerning all educational understanding I earned. It covered a wonderful region of issue that may help some of needy humans. everything cited here is obvious and without a doubt beneficial. Logistics and Freight Forwarding Software Bahrain

Unknown said...

data sgp
data sydney
datahk
syair sydney
syairsgp
datasgp
paito warna
http://warungsgp.com/
live hk 6d
live sydney

Rajat Gaikwad said...

I think this is an informative post and knowledgeable. I would like to thank you for the efforts you have made in writing this article
packers and movers in shimla

indeed seo said...

This blog gives a important information. i appreciate it. Thanks for sharing visit at Top SEO company In india 2019

Vijiaajith said...

Nice.... keep sharing
freeinplanttrainingcourseforECEstudents
internship-in-chennai-for-bsc
inplant-training-for-automobile-engineering-students
freeinplanttrainingfor-ECEstudents-in-chennai
internship-for-cse-students-in-bsnl
application-for-industrial-training

Vijiaajith said...

NICE
interview-questions/aptitude/permutation-and-combination/how-many-groups-of-6-

persons-can-be-formed


tutorials/oracle/oracle-delete

technology/chrome-flags-complete-guide-enhance-browsing-experience/

interview-questions/aptitude/time-and-work/a-alone-can-do-1-4-of-the-work-in-2-days


interview-questions/programming/recursion-and-iteration/integer-a-40-b-35-c-20-d-10

-comment-about-the-output-of-the-following-two-statements


imovie Windows said...

This is a wonderful blog. i appreciate it . Thanks for sharing it. Visit at hd video editing software

DMPS said...

Wow such a wonderful Blog and the contennts available in your blog are also good...and such a important and good imformation. Our Services are : Digital Marketing Company | Digital Marketing Company in Delhi | Digital Marketing Company in Noida
SEO Services Company | SEO Company in Delhi | SEO Company in Noida
PPC Services Company | PPC Company in Delhi | PPC Company in Noida

Elite Pediatrics said...

Great Blog! Thanks for sharing it with us Keep it up pediatric care center Paterson

tejaswini said...

I am a new user of this site so here i saw multiple articles and posts posted by this site,I curious more interest in some of them hope you will give more information on this topics in your next articles.

machine learning course malaysia

t0r.network said...

I’m hacker and Services provider
intersted in any thing i do fair deals.
I will show work how things work
Short Course hacking, carding, clone ATM Card


.. Western Union transfer
.. Bank Transfer
.. Credit Cards
.. Money Adders
.. Bill Payment
.. College Fee
.. Fake Documents /ID, License
.. Grade Change / Update
.. Credit score / history update

Contact:
t0r.netw0rk@yahoo.com

webspace said...

We are Webspace Inc. organization working as the Best Digital Marketing Company in USA and we give many services to our client that is website designing, website development, Search Engine Optimization, E-commerce web Designing, Software Development, Google Adword and Mobile Application.
Web Development company in Los Angeles
web design New York
web development New York
online marketing New York
ecommerce web development New York
internet marketing New York
SEO company New York
seo company USA
Web development company
Web development company California
Web development company Los angeles
Web Design Company
webiste design services
website design services in usa
website redesign services
website design company in usa
web development company
website development comapny in usa
webdevelopment company usa

bengop said...
This comment has been removed by the author.
bengop said...
This comment has been removed by the author.
bengop said...

چرا به دبی سفر کنیم
artaweb
چرا تور استانبول
دبی تا ابوظبی

Site Meter