Foundational Application Security
Field notes from the trenches of appsec implementation
Managers play an important role in supporting the adoption of SDL in a development organization. Adoption of SDL requires strong commitment from executive and senior leaders. Without this commitment and support, the adoption of SDL will either fail or not be as successful as it could be. Executives should demonstrate support for the initiative by … Read more
Current software development methodologies do not give enough attention to security concerns. Whether you use waterfall, agile, lean/devops or a combination, the likelihood is that the inherent approach lacks a significant and deep focus on security in a way that will reduce the likelihood of security bugs being written into software. This is what makes … Read more
Today, it’s not enough to secure the network and the OS. The threats have changed and security must change too. With the strong focus on the network, attackers have become more sophisticated and adept at focusing their attention on databases. This brings application security right to the forefront. The best way to protect your application … Read more
Use the INVEST criteria when formulating user stories Acceptance Criteria Acceptance criteria are a set of statements, each with a clear pass/fail result, added to a user story. Put simply, acceptance criteria specify conditions under which a user story is fulfilled. They should be expressed clearly, in simple language, without any ambiguity about the expected … Read more