Security Practices Useful in Agile Development
summary
Provides a practical checklist to integrate security into agile workflows: map threats during planning, and embed SAST/SCA/DAST/IAST into CI/CD pipelines rather than relying only on culture. Recommends tools — Snyk for SAST+SCA, Dependabot/RepoSecurity for package scans, and ZAP or Burp for DAST — and advises using a security test pyramid and S-SDD flow to avoid slowing CI; assess findings by CVSS severity and EPSS exploit probability and prioritize fixes by exploitability versus remediation cost.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 7:46DevSecOps lifecycle overview
- 11:18Security in build phase
- 27:23Testing practices
- 33:20Vulnerability prioritization
- 38:41Collaborating with security experts
- 42:12Summary and Q&A
related talks
39mSecurity Tooling in Your DevOps Pipeline
26mBeyond Testing: Application Security in the Age of DevOps
46mApplication Security in an Agile World
46mSecurity DevOps - Staying Secure In Agile Projects
42mContinuous Security: Integrate security tools into your DevOps Pipeline
40mDevSecOps Guide to Bulletproof Your Development Workflow
37mDevSecOps Guide to Bulletproof Your Development Workflow
29mSecuring Your Web Application Pipeline From Intruders