veyepar: Why can’t we be friends? Integrating Security into an Existing Agile SDLC

Author(s):	Laura Bell
Location	OGGB3
Date	jan Fri 16	Days Raw Files
Start	15:40	First Raw Start	15:01
Duration	0:45:00	Offset	0:38:22
End	16:25	Last Raw End	16:30
Chapters	00:00
Total cuts_time	45 min.

http://lca2015.linux.org.au/schedule/30060/view_talk
raw-playlist raw-mp4-playlist encoded-files-playlist host public tweet mp4 svg png

assets release.pdf Why_cant_we_be_friends_Integrating_Security_into_an_Existing_Agile_SDLC.json
logs
Admin: episode episode list cut list raw files day marks day marks day image_files

State:

Locked:

clear this to unlock

Locked by:

user/process that locked.

Start:

initially scheduled time from master, adjusted to match reality

Duration:

length in hh:mm:ss

Name:

Video Title (shows in video search results)

Emails:

email(s) of the presenter(s)

Released:

has someone authorised pubication

Normalise:

Channelcopy:

m=mono, 01=copy left to right, 10=right to left, 00=ignore.

Thumbnail:

filename.png

Description:

markdown

Agile development is often seen as a delicate balance of ritual and roles allowing for rapid development, continuous deployment and the expansion of the post-it note industry.

Security is often seen as a lumbering giant of process, governance and technology allowing for increased control, reduced risk and the expansion of the technology vendor industry.

What if you could merge the two? No really! What if these two former polar opposites can be made to play nicely together?

The world of security is changing to meet the needs of agile software development. Organisations around the world are coming up with tools, techniques and processes to make security a continuous presence to support developers.

In this talk I will outline the questions and challenges involved with implementing security in an agile SDLC, outline some techniques and tools that you can use and share some lessons learned from my journey so far.

So whether you are a shiny new start-up wanting to secure development from the beginning or you are an existing company with years of well-earned technical and security debt ; This talk is for you.

Comment:

production notes