Painless Agile Security
summary
Argues that security must live inside short iterations with measurable practices not vague promises, and gives concrete ways to do it: write tests first with TDD, gate changes with continuous integration, add software composition analysis plus static and dynamic scanners into the repo and pipeline. Tracks quality with percent unit‑test coverage, lint/duplication counts, cyclomatic complexity and number of vulnerabilities found. Recommends start small, break work into tiny increments, and work in the team tools and cadence.
AI-written summary · about
chapters (8)
- 0:00Agile and security intro
- 3:21Agile pitfalls in practice
- 10:49Extreme Programming practices
- 15:04Scrum and Agile anti-patterns
- 19:25Agile with security
- 24:27Security in Agile workflows
- 26:33Summary
- 27:43Q&A
related talks
46mApplication Security in an Agile World
57mAgile Application Security
45mAgile Security Testing - Lessons Learned
45mApplication security loves Agile
40mMaking Security an integrated part of the SW Dev Lifecycle
01h 04mShifting Security Everywhere
44mSecurity Practices Useful in Agile Development
27mSecurity Learns to Sprint: DevSecOps