Agile Application Security: Enabling Security in a Continuous Delivery Pipeline

As the fastest growing, most commonly adopted development lifecycle, agile software development enables organizations to react quickly to rapidly changing customer requirements and market conditions without heavy capital investment or long delays. But many people in the software industry believe that this finely tuned balance of processes, patterns, and practices is difficult to integrate with traditional security management techniques.

With this practical guide, you’ll learn a range of security tools and techniques specifically adapted to integrate with agile development. These practices aim to bridge the divide between these two worlds and bring security confidence and consciousness without compromising innovation, flexibility, and speed.

Table of Contents

Chapter 1. Getting started with security
Chapter 2. Agile Enablers
Chapter 3. Welcome to the agile revolution
Chapter 4. Working with your existing agile lifecycle
Chapter 5. Security and Requirements
Chapter 6. Agile Vulnerability Management
Chapter 7. Risk for Agile Teams
Chapter 8. Threat Assessments and Understanding Attacks
Chapter 9. Building secure and usable systems
Chapter 10. Code Review for Security
Chapter 11. Agile Security Testing
Chapter 12. External Reviews, Testing and Advice
Chapter 13. Operations and OpSec
Chapter 14. Compliance
Chapter 15. Security Culture
Chapter 16. What does Agile Security mean?