AGIL JA, ABER SICHER? , ANDREAS FALK, 34. SCRUM TISCH

Size: px
Start display at page:

Download "AGIL JA, ABER SICHER? 29.07.2015, ANDREAS FALK, 34. SCRUM TISCH"

Transcription

1 AGIL JA, ABER SICHER? , ANDREAS FALK, 34. SCRUM TISCH

2 Vorstellung: Andreas Falk Langjährige Erfahrungen als Entwickler, Architekt und Tester in verschiedenen Projekten mit Fokus Enterprise-Anwendungen auf Basis von Java, Java EE / Spring in den Branchen Produktion, Logistik, Finance, Telekommunikation und Automotive Senior Consultant Seit 2011 bei der NovaTec Consulting GmbH Experte in der NovaTec Competence Group Agile Quality Engineering" Durchführung von Trainings für Java, Spring, Git, Advanced Unit-Testing und Agile (Security) Testing 2

3 Who s next to be hacked? 3 U.S. Office of Personnel Management

4 Who s next to be hacked? 5

5 Who s next to be hacked? 6 https://haveibeenpwned.com

6 Web Application Security: OWASP Top 10 (2013) https://www.owasp.org/index.php/category:owasp_top_ten_project 7

7 Security == Agile? Sprint 1 Sprint 2 Sprint n Story A Story B Story C Story D Story E Story F Story G Story H Security Features Penetrationtest 9

8 Potentially Releasable Increment? Scrum Guide: The Development Team consists of professionals who do the work of delivering a potentially releasable increment of Done product at the end of each Sprint Release potentially unsecure? 10

9 Attacker Schedule vs. SDLC Security Test Schedule Attacker Schedule: 24h x 7d! Time Software Development Lifecycle Penetrationtest Penetrationtest 11

10 Microsoft Security Development Lifecycle (SDL) https://www.microsoft.com/en-us/sdl/ 13

11 Automotive Security Development Lifecycle (V-Model) 15

12 Next Stop: Secure Agile Development Process 16

13 Manifesto for Secure Agile Software Development 17

14 The Rugged Manifesto 18 https://www.ruggedsoftware.org

15 Microsoft Security Development Lifecycle for Agile Development Agile Process SDLC Tasks One Time Baseline thread model Estabish security response plan Regular Basis Privacy review Manual & automatic security code review Every Sprint Security training Threat modeling Secure coding Code reviews 19

16 OWASP Open Software Assurance Maturity Model (OpenSAMM) 20

17 Secure Agile Development with Scrum Daily Scrum Sprint Security Product Backlog Sprint Planning Sprint Backlog Security Sprint Review & Retro Potentially Shippable Increment Regular Security-Trainings 21

18 Secure Agile Development with Scrum Story A Story B Abuse Story Security Features Product Backlog Update threat model (on-going) Define abuse user stories Plan security features early Security acceptance criteria Extend Definition of Ready with security 23

19 Abuse (Evil) User Stories Business User Story Evil User Story 1 Evil User Story N As a customer I want to select products and add them to my shopping cart in order to buy these. As an evil user I want to manipulate requests to change prices when adding products to my shopping cart. 24

20 Secure Agile Development with Scrum Daily Scrum Discuss security risks (Re-)plan security tasks Sprint Update threat model (on-going) Secure coding Pair programming with security expert Security code reviews Security-Aware DoD Security (regression) testing Continuous secure delivery 25

21 Threat Modeling is Agile Create Production Code Make Tests Pass 6 1 Define Software- Architecture User Stories, UML Diagrams Test Driven Development (TDD) 2 Adapt Threat Model Discussion Basis Write Security Tests First 5 Create Security Testcases and Abuse User Stories 4 3 Identify and Mitigate Threats Elevation of privilege game 26

22 Playing games Scrum Planning Poker Threat Modeling Game 27

23 Commit Stage: Feedback Based Development (Static Security Testing) Continuous Integration Build & Tests & Static Code Analysis 3 Check-Out 4 & Dependency Check 2 Trigger Build 5 Report Build Result 7 Push to Stable 1 Pull-Request Developer 2 6 (Security) Code- Review Developer 1 31

24 Acceptance Stage Dynamic UI- and Security-Testing Security-Pipeline 3 Active Scanning 4 Reporting 1 Deploy 2 UI-Testing Proxy 33

25 Agile == Security! Sprint 1 Sprint 2 Sprint n Story A Story B Abuse Story Story C Story D Story E Security Features Abuse Story Story F Story G Story H Pen- Test 34

26 Don t make it that EASY to break software! 35

Agile and Secure Can We Be Both? Chicago OWASP. June 20 th, 2007

Agile and Secure Can We Be Both? Chicago OWASP. June 20 th, 2007 Agile and Secure Can We Be Both? Chicago OWASP June 20 th, 2007 The Agile Practitioner s Dilemma Agile Forces: Be more responsive to business concerns Increase the frequency of stable releases Decrease

More information

Agile and Secure: Can We Be Both?

Agile and Secure: Can We Be Both? Agile and Secure: Can We Be Both? OWASP AppSec Seattle Oct 2006 Keith Landrus Director of Technology Denim Group Ltd. keith.landrus@denimgroup.com (210) 572-4400 Copyright 2006 - The OWASP Foundation Permission

More information

Agile and Secure: OWASP AppSec Seattle Oct 2006. The OWASP Foundation http://www.owasp.org/

Agile and Secure: OWASP AppSec Seattle Oct 2006. The OWASP Foundation http://www.owasp.org/ Agile and Secure: Can We Be Both? OWASP AppSec Seattle Oct 2006 Dan Cornell, OWASP San Antonio Leader Principal, Denim Group Ltd. dan@denimgroup.com (210) 572-4400 Copyright 2006 - The OWASP Foundation

More information

Secure Development LifeCycles (SDLC)

Secure Development LifeCycles (SDLC) www.pwc.com Feb 2014 Secure Development LifeCycles (SDLC) Bart De Win Bart De Win? 15+ years of Information Security Experience Ph.D. in Computer Science - Application Security Author of >60 scientific

More information

When is Agile the Best Project Management Method? Lana Tylka

When is Agile the Best Project Management Method? Lana Tylka When is Agile the Best Project Management Method? Lana Tylka Staged Incremental Deliveries Prototypes Plan Develop Design Deploy Test Maintain Sequential Steps Multiple Iterations Waterfall Sprints, Spirals

More information

Topics covered. Agile methods Plan-driven and agile development Extreme programming Agile project management Scaling agile methods

Topics covered. Agile methods Plan-driven and agile development Extreme programming Agile project management Scaling agile methods Topics covered Chapter 3 Agile Software Development Agile methods Plan-driven and agile Extreme programming Agile project management Scaling agile methods 1 2 Need for rapid software Rapid software Changing

More information

Agile Testing. Workshop. Tilo Linz, imbus AG

Agile Testing. Workshop. Tilo Linz, imbus AG Workshop Tilo Linz, imbus AG 2014 imbus AG www.imbus.de Tilo Linz CoFounder and member of managing board imbus AG President ISTQB (2002-2005) Chairman German Testing Board e.v. (2002-2013) Author Softwaretest

More information

Application Lifecycle Management Using Visual Studio 2013 (SCRUM)

Application Lifecycle Management Using Visual Studio 2013 (SCRUM) Course Code: QAALMS13 Vendor: Microsoft Course Overview Duration: 3 RRP: 2,009 Application Lifecycle Management Using Visual Studio 2013 (SCRUM) Overview This three-day, instructor-led course provides

More information

Agile Project Management By Mark C. Layton

Agile Project Management By Mark C. Layton Agile Project Management By Mark C. Layton Agile project management focuses on continuous improvement, scope flexibility, team input, and delivering essential quality products. Agile project management

More information

Beyond ISO 27034 - Intel's Product Security Maturity Model (PSMM)

Beyond ISO 27034 - Intel's Product Security Maturity Model (PSMM) Beyond ISO 27034 - Intel's Product Security Maturity Model (PSMM) Harold Toomey Sr. Product Security Architect & PSIRT Manager Intel Corp. 2 October 2015 @NTXISSA #NTXISSACSC3 Agenda Application / Product

More information

Secure Code Development

Secure Code Development ISACA South Florida 7th Annual WOW! Event Copyright Elevate Consult LLC. All Rights Reserved 1 Agenda i. Background ii. iii. iv. Building a Business Case for Secure Coding Top-Down Approach to Develop

More information

Project Management in Software: Origin of Agile

Project Management in Software: Origin of Agile PAGE 1 ios App Development Project Management in Software: Origin of Agile PAGE 2 Learning Outcomes By the end of the unit, you should be able to: 1. Differentiate between Waterfall and Agile process 2.

More information

The Agile Movement An introduction to agile software development

The Agile Movement An introduction to agile software development The Agile Movement An introduction to agile software development 1 The Agile Movement An introduction to agile software development Russell Sherwood @russellsherwood & David Sale @saley89 Agenda Who are

More information

Integrating Vulnerability Scanning into the SDLC

Integrating Vulnerability Scanning into the SDLC Integrating Vulnerability Scanning into the SDLC Eric Johnson JavaOne Conference 10/26/2015 1 Eric Johnson (@emjohn20) Senior Security Consultant Certified SANS Instructor Certifications CISSP, GWAPT,

More information

ALM2013VS_ACC: Application Lifecycle Management Using Visual Studio 2013

ALM2013VS_ACC: Application Lifecycle Management Using Visual Studio 2013 ALM2013VS_ACC: Application Lifecycle Management Using Visual Studio 2013 Description This three-day, instructor-led course provides students with the knowledge and skills to effectively use the Application

More information

Application Security Testing

Application Security Testing Tstsec - Version: 1 09 July 2016 Application Security Testing Application Security Testing Tstsec - Version: 1 4 days Course Description: We are living in a world of data and communication, in which the

More information

Effektiver Tool-Einsatz

Effektiver Tool-Einsatz Effektiver Tool-Einsatz für Scrum-Projekte im Java-Umfeld Agile Softwareentwicklung Werte, Prinzipien, Methoden und Prozesse 13. OBJEKTspektrum Information Days 29. April 2010, München Gerhard Müller,

More information

ALM using Visual Studio 2012(Agile)

ALM using Visual Studio 2012(Agile) Course Code: QAALMA12 Vendor: Microsoft Course Overview Duration: 3 RRP: 1,900 ALM using Visual Studio 2012(Agile) Overview This three-day, instructor-led course provides delegates with the knowledge and

More information

SECURITY AND RISK MANAGEMENT

SECURITY AND RISK MANAGEMENT SECURITY AND RISK MANAGEMENT IN AGILE SOFTWARE DEVELOPMENT SATURN 2012 Conference (#SATURN2012) Srini Penchikala (@srinip) 05.10.12 #WHOAMI Security Architect @ Financial Services Organization Location:

More information

How to start a software security initiative within your organization: a maturity based and metrics driven approach OWASP

How to start a software security initiative within your organization: a maturity based and metrics driven approach OWASP How to start a software security initiative within your organization: a maturity based and metrics driven approach Marco Morana OWASP Lead/ TISO Citigroup OWASP Application Security For E-Government Copyright

More information

Testing in Scrum Projects

Testing in Scrum Projects Testing in Scrum Projects Kalevi Evans Logica 2008. All rights reserved About Me Logica Suomi Oy (formerly WM-Data) Over 6 years experience Experience working in projects that apply the following software

More information

26 May 2010 CQAA Lunch & Learn Paul I. Pazderski (CSM/CSP, OD-CM, CSQA) spcinc13@yahoo.com Cell: 224-595-8846 AGILE THROUGH SCRUM

26 May 2010 CQAA Lunch & Learn Paul I. Pazderski (CSM/CSP, OD-CM, CSQA) spcinc13@yahoo.com Cell: 224-595-8846 AGILE THROUGH SCRUM 26 May 2010 CQAA Lunch & Learn Paul I. Pazderski (CSM/CSP, OD-CM, CSQA) spcinc13@yahoo.com Cell: 224-595-8846 AGILE THROUGH SCRUM 1 AGENDA & LEARNING POINTS 1. Open 2. Agile Overview 3. Scrum Basics Learning

More information

Agile Software Development. Stefan Balbo / Patrick Dolemieux

Agile Software Development. Stefan Balbo / Patrick Dolemieux Agile Software Development Stefan Balbo / Patrick Dolemieux Agile Software Development Stefan Balbo / Patrick Dolemieux Content Why go Agile? Introduction to Scrum - Process - Roles Agile Estimating and

More information

Agile Software Engineering Practice to Improve Project Success

Agile Software Engineering Practice to Improve Project Success Agile Software Engineering Practice to Improve Project Success Dietmar Winkler Vienna University of Technology Institute of Software Technology and Interactive Systems dietmar.winkler@qse.ifs.tuwien.ac.at

More information

IBM Innovate 2011. AppScan: Introducin g Security, a first. Bobby Walters Consultant, ATSC bwalters@atsc.com Application Security & Compliance

IBM Innovate 2011. AppScan: Introducin g Security, a first. Bobby Walters Consultant, ATSC bwalters@atsc.com Application Security & Compliance IBM Innovate 2011 Bobby Walters Consultant, ATSC bwalters@atsc.com Application Security & Compliance AppScan: Introducin g Security, a first June 5 9 Orlando, Florida Agenda Defining Application Security

More information

Call for Tender for Application Development and Maintenance Services

Call for Tender for Application Development and Maintenance Services ADM Partners Reference #: 100001200 Call for Tender for Application Development and Maintenance Services Annex 2 - Agile Application Development and Maintenance Appendix A - OECD s Agile Practices and

More information

Agile Project Management with Scrum

Agile Project Management with Scrum Agile Project Management with Scrum Resource links http://www.agilealliance.org/ http://www.agilemanifesto.org/ http://www.scrum-master.com/ 1 Manifesto for Agile Software Development Individuals and interactions

More information

Agile Security Successful Application Security Testing for Agile Development

Agile Security Successful Application Security Testing for Agile Development WHITE PAPER Agile Security Successful Application Security Testing for Agile Development Software Security Simplified Abstract It is an imperative to include security testing in application development.

More information

Certified ScrumMaster (CSM) Content Outline and Learning Objectives January 2012

Certified ScrumMaster (CSM) Content Outline and Learning Objectives January 2012 Certified ScrumMaster (CSM) Content Outline and Learning Objectives January 2012 The following pages present the CSM taxonomy as validated through the 2011 Scrum Alliance Validation Study. Each percentage

More information

Agile in a Safety Critical world

Agile in a Safety Critical world Agile in a Safety Critical world Julian Goddard 24/11/2014 26/11/14 (c) 2014 Plaxion Limited. All rights reserved. 1 Contents Introductions The pervasiveness of software Agile review Safety Critical software

More information

Agile extreme Development & Project Management Strategy Mentored/Component-based Workshop Series

Agile extreme Development & Project Management Strategy Mentored/Component-based Workshop Series Overview This is a 15-day live facilitator-led or virtual workshop is designed to prompt your entire team to work efficiently with Microsoft s Application Lifecycle Management solution based around Visual

More information

Certified ScrumMaster (CSM) Content Outline and Learning Objectives January 2012

Certified ScrumMaster (CSM) Content Outline and Learning Objectives January 2012 Certified ScrumMaster (CSM) Content Outline and Learning Objectives January 2012 The following pages present the CSM taxonomy as validated through the 2011 Scrum Alliance Validation Study. Total questions

More information

Entire contents 2011 Praetorian. All rights reserved. Information Security Provider and Research Center www.praetorian.com

Entire contents 2011 Praetorian. All rights reserved. Information Security Provider and Research Center www.praetorian.com Entire contents 2011 Praetorian. All rights reserved. Information Security Provider and Research Center www.praetorian.com Threat Modeling "Threat modeling at the design phase is really the only way to

More information

Benefits of Test Automation for Agile Testing

Benefits of Test Automation for Agile Testing Benefits of Test Automation for Agile Testing Manu GV 1, Namratha M 2, Pradeep 3 1 Technical Lead-Testing Calsoft Labs, Bangalore, India 2 Assistant Professor, BMSCE, Bangalore, India 3 Software Engineer,

More information

Secure Development Lifecycle. Eoin Keary & Jim Manico

Secure Development Lifecycle. Eoin Keary & Jim Manico Secure Development Lifecycle Jim Manico @manicode OWASP Volunteer Global OWASP Board Member OWASP Cheat-Sheet Series Manager VP of Security Architecture, WhiteHat Security 16 years of web-based, database-driven

More information

Software Development: The Next Security Frontier

Software Development: The Next Security Frontier James E. Molini, CISSP, CSSLP Microsoft Member, (ISC)² Advisory Board of the Americas jmolini@microsoft.com http://www.codeguard.org/blog Software Development: The Next Security Frontier De-perimiterization

More information

Agile Processes and Methodologies: A Conceptual Study

Agile Processes and Methodologies: A Conceptual Study Agile Processes and Methodologies: A Conceptual Study Sheetal Sharma Amity School of Engineering & Technology Amity University Noida Sheetal.meenu@gmail.com Darothi Sarkar Amity School of Engineering &

More information

Mariusz Chrapko. Before: Software Quality Engineer/ Agile Coach, Motorola, Poland. My Public Profile: http://www.linkedin.

Mariusz Chrapko. Before: Software Quality Engineer/ Agile Coach, Motorola, Poland. My Public Profile: http://www.linkedin. Gathering Customer Requirements in an Agile Environment Mariusz Chrapko ReConf 2009, Munich Mariusz Chrapko Now: Process Consultant/ Agile Coach@Kugler Maag CIE, Stuttgart Supported Areas: - CMMI - SPICE/

More information

AGILE & SCRUM. Revised 9/29/2015

AGILE & SCRUM. Revised 9/29/2015 AGILE & SCRUM Revised 9/29/2015 This Page Intentionally Left Blank Table of Contents Scrum Fundamentals Certified Course... 1 Scrum Developer Certified (SDC)... 2 Scrum Master Certified (SMC)... 3 Scrum

More information

Introduction to Agile Software Development Process. Software Development Life Cycles

Introduction to Agile Software Development Process. Software Development Life Cycles Introduction to Agile Software Development Process Presenter: Soontarin W. (Senior Software Process Specialist) Date: 24 November 2010 AGENDA Software Development Life Cycles Waterfall Model Iterative

More information

MM Agile: SCRUM + Automotive SPICE. Electronics Infotainment & Telematics

MM Agile: SCRUM + Automotive SPICE. Electronics Infotainment & Telematics MM Agile: SCRUM + Automotive SPICE Electronics Infotainment & Telematics 20 Novembre, 2010 INDEX Introduction Why MM Agile Approach? How did we align classical and agile approach? How do we implement SCRUM?

More information

The Security Development Lifecycle

The Security Development Lifecycle The Security Development Lifecycle Steven B. Lipner Director of Security Engineering Strategy Security Business and Technology Unit Microsoft Corporation Context and History 1960s penetrate and patch 1970s

More information

ICAgile Learning Roadmap Agile Testing Track

ICAgile Learning Roadmap Agile Testing Track International Consortium for Agile ICAgile Learning Roadmap Agile Testing Track Learning Objectives Licensing Information The work in this document was facilitated by the International Consortium for Agile

More information

Bridging the Gap Between Acceptance Criteria and Definition of Done

Bridging the Gap Between Acceptance Criteria and Definition of Done Bridging the Gap Between Acceptance Criteria and Definition of Done Sowmya Purushotham, Amith Pulla sowmya.sudha@gmail.com, amith.pulla@intel.com Abstract With the onset of Scrum and as many organizations

More information

Software Engineering and Scientific Computing

Software Engineering and Scientific Computing Software Engineering and Scientific Computing Barbara Paech, Hanna Valtokari Institute of Computer Science Im Neuenheimer Feld 326 69120 Heidelberg, Germany http://se.ifi.uni-heidelberg.de paech@informatik.uni-heidelberg.de

More information

Maintaining Quality in Agile Environment

Maintaining Quality in Agile Environment Maintaining Quality in Agile Environment Authors : Mr. Vasu Padmanabhan, Mr. V. Arockia Jerome Presenter / Speaker : Mr. V. Arockia Jerome Banking and Financial Services, Delivery Excellence Group (DEG)

More information

"Agile Software Engineering" Overview for external offering of ASE ABAP. Juergen Heymann, CPO Software Engineering

Agile Software Engineering Overview for external offering of ASE ABAP. Juergen Heymann, CPO Software Engineering "Agile Software Engineering" Overview for external offering of ASE ABAP Juergen Heymann, CPO Software Engineering There are many ingredients for successful software projects Experienced Developers Domain

More information

Microsoft SDL: Agile Development

Microsoft SDL: Agile Development Microsoft SDL: Agile Development June 24, 2010 Nick Coblentz, CISSP Senior Security Consultant AT&T Consulting Nick.Coblentz@gmail.com http://nickcoblentz.blogspot.com http://www.twitter.com/sekhmetn Copyright

More information

Starting your Software Security Assurance Program. May 21, 2015 ITARC, Stockholm, Sweden

Starting your Software Security Assurance Program. May 21, 2015 ITARC, Stockholm, Sweden Starting your Software Security Assurance Program May 21, 2015 ITARC, Stockholm, Sweden Presenter Max Poliashenko Chief Enterprise Architect Wolters Kluwer, Tax & Accounting Max leads the Enterprise Architecture

More information

Erfolgreiche Zusammenarbeit:

Erfolgreiche Zusammenarbeit: Erfolgreiche Zusammenarbeit: Agile Manager, Application Lifecycle Management und HP Quality Center Thomas Köppner, Technical Consultant, HP HP Agile Manager im Zusammenspiel mit HP Quality Center 2 Thomas

More information

Software Engineering

Software Engineering 1 Software Engineering Lecture 2: Software Life Cycles Stefan Hallerstede Århus School of Engineering 25 August 2011 2 Contents Naive Software Development Code & Fix Towards A Software Process Software

More information

Threat Modeling: The Art of Identifying, Assessing, and Mitigating security threats

Threat Modeling: The Art of Identifying, Assessing, and Mitigating security threats Threat Modeling: The Art of Identifying, Assessing, and Mitigating security threats Mohamed Ali Saleh Abomhara University of Agder mohamed.abomhara@uia.no Winter School in Information Security, Finse May

More information

Agile with XP and Scrum

Agile with XP and Scrum Agile with XP and Scrum Amit Goel National Agile Software Workshop @ Indore Agile India Conference Agile Software Community of India Disclaimer and Credits Most of material in this presentation has been

More information

An Agile Project Management Model

An Agile Project Management Model Agile Project Management Jim Highsmith Chapter 5 An Agile Project Management Model We improve effectiveness and reliability through situationally specific strategies, processes, and practices. One of the

More information

Software Engineering and Scientific Computing

Software Engineering and Scientific Computing Software Engineering and Scientific Computing Barbara Paech, Hanna Valtokari Institute of Computer Science Im Neuenheimer Feld 326 69120 Heidelberg, Germany http://se.ifi.uni-heidelberg.de paech@informatik.uni-heidelberg.de

More information

Agile software development

Agile software development Agile software development Syed Nisar Hussain Bukhari Scientist-B DOEACC centre Srinagar nisar.bukhari@gmail.com Abstract: The field of software development is open and dynamic. New approaches of software

More information

Laboratório de Desenvolvimento de Software

Laboratório de Desenvolvimento de Software Laboratório de Desenvolvimento de Software FEUP/MIEIC, 2015/16 Ademar Aguiar Nuno Flores Rui Maranhão Hugo Ferreira Luís Teixeira url: moodle http://www.facebook.com/notes/facebook-engineering/visualizing-friendships/469716398919

More information

Software Life Cycles and Configuration Management

Software Life Cycles and Configuration Management Theory Lecture Plan 2 Software Configuration Lecture 11 Software Engineering TDDC88/TDDC93 autumn 2008 Department of Computer and Information Science Linköping University, Sweden L1 - Course Introduction

More information

CHAPTER 3 : AGILE METHODOLOGIES. 3.3 Various Agile Software development methodologies. 3.4 Advantage and Disadvantage of Agile Methodology

CHAPTER 3 : AGILE METHODOLOGIES. 3.3 Various Agile Software development methodologies. 3.4 Advantage and Disadvantage of Agile Methodology CHAPTER 3 : AGILE METHODOLOGIES 3.1Introductions 3.2 Main Stages in Agile project 3.3 Various Agile Software development methodologies 3.4 Advantage and Disadvantage of Agile Methodology 3.1Introductions

More information

Agile Development in Today s Industry. Duke CS408 Session 2014

Agile Development in Today s Industry. Duke CS408 Session 2014 Agile Development in Today s Industry Duke CS408 Session 2014 Agenda } Introductions } Agile Development Process } Agile Development Exercise } Informal Discussions } Questions Agile Methodologies Agile

More information

Agile Scrum Workshop

Agile Scrum Workshop Agile Scrum Workshop What is agile and scrum? Agile meaning: Able to move quickly and easily. Scrum meaning: a Rugby play Agile Scrum: It is an iterative and incremental agile software development framework

More information

Models of Software Development

Models of Software Development October 28, 2015 Verification & Validation In many computer science courses, software is submitted once, graded, and thrown away. In real life, software development is an process. Some attempts to codify

More information

The So5ware Development Process (SDLC)

The So5ware Development Process (SDLC) h(p://home.hit.no/~hansha/?page=so5ware_development O. Widder. (2013). geek&poke. Available: h(p://geek- and- poke.com The So5ware Development Process (SDLC) Hans- Pe(er Halvorsen, M.Sc. 1 IT System B.

More information

Secure Programming Lecture 9: Secure Development

Secure Programming Lecture 9: Secure Development Secure Programming Lecture 9: Secure Development David Aspinall, Informatics @ Edinburgh 24th February 2014 Outline Overview Lifecycle security touchpoints 1. Code review and repair 2. Architectural risk

More information

Agile and lean methods for managing application development process

Agile and lean methods for managing application development process Agile and lean methods for managing application development process Hannu Markkanen 24.01.2013 1 Application development lifecycle model To support the planning and management of activities required in

More information

In Building Security In, Gary McGraw proposes three pillars to use throughout the lifecycle: I: Applied Risk Management

In Building Security In, Gary McGraw proposes three pillars to use throughout the lifecycle: I: Applied Risk Management Secure Programming Lecture 9: Secure Development David Aspinall, Informatics @ Edinburgh 24th February 2014 Outline Overview Lifecycle security touchpoints 1. Code review and repair 2. Architectural risk

More information

Applying Agile in the Corporate Environment

Applying Agile in the Corporate Environment Alexander Babkin Quality Engineering Manager Motorola Mobility http://ru.linkedin.com/in/alexanderbabkin Applying Agile in the Corporate Environment MOTOROLA and the Stylized M Logo are trademarks or registered

More information

2015 Defense Health Information Technology Symposium Implementation of Agile SCRUM Software Development Methodology

2015 Defense Health Information Technology Symposium Implementation of Agile SCRUM Software Development Methodology Mr. Christopher Harrington, PM Clinical Support, Solution Delivery Division Mr. James Huber, Healthcare Data Analyst, DHA Decision Support 2015 Defense Health Information Technology Symposium Implementation

More information

Agile Development Overview

Agile Development Overview Presented by Jennifer Bleen, PMP Project Services Practice of Cardinal Solutions Group, Inc. Contact: Agile Manifesto We are uncovering better ways of developing software by doing it and helping others

More information

Team Foundation Server

Team Foundation Server Team Foundation Server S. Adams. Dilbert. Available: http://dilbert.com Hans-Petter Halvorsen, M.Sc. Team Foundation Server (TFS) is an Application Lifecycle Management (ALM) system The Software Development

More information

Applying Agile Project Management to a Customized Moodle Implementation

Applying Agile Project Management to a Customized Moodle Implementation Applying Agile Project Management to a Customized Moodle Implementation November 6, 2013 Presented by: Curtis Fornadley, PMP UCLA CCLE Coordinator Applying Agile Project Management to a Customized Moodle

More information

Agile Software Development compliant to Safety Standards?

Agile Software Development compliant to Safety Standards? DB AG/Christian Bedeschinski www.thalesgroup.com/germany Agile Software Development compliant to Safety Standards? Christian Scholz Thales Transportation Systems 2 / Content Motivation Agile Software Development

More information

Scrum. SE Presentation. Anurag Dodeja Spring 2010

Scrum. SE Presentation. Anurag Dodeja Spring 2010 Scrum SE Presentation by Anurag Dodeja Spring 2010 What is Scrum? Scrum is an agile software development framework. Work is structured in cycles of work called sprints, iterations of work that are typically

More information

Axe in the Agile World

Axe in the Agile World Axe in the Agile World WHITE PAPER Executive Summary This paper explains the way in which Axe (Odin s Enterprise Test Automation Platform) allows the automated testing to take place in a range of project

More information

SECC Agile Foundation Certificate Examination Handbook

SECC Agile Foundation Certificate Examination Handbook Versions 2.0 Version Date Remarks 1.0 12/4/2012 Initial version 2.0 3/8/2008 REVISION HISTORY Updated knowledge areas Added questions examples Updated suggested readings section Page 2 of 15 Version 2.0

More information

Good Agile Testing Practices and Traits How does Agile Testing work?

Good Agile Testing Practices and Traits How does Agile Testing work? Agile Testing Best Practices Introduction The testing phase of software development sometimes gets the short shrift from developers and IT managers. Yet testing is the only way to determine whether an

More information

A Study of RE Across Different Software Development Lifecycle Models. Afiya Nusrat and Navreet Ghag CS 846 Spring 2015

A Study of RE Across Different Software Development Lifecycle Models. Afiya Nusrat and Navreet Ghag CS 846 Spring 2015 A Study of RE Across Different Software Development Lifecycle Models Afiya Nusrat and Navreet Ghag CS 846 Spring 2015 Motivation In-depth look at the SDL process and requirements gathering in two companies

More information

Challenges of Software Security in Agile Software Development

Challenges of Software Security in Agile Software Development Challenges of Software Security in Agile Software Development Dr. Panayotis Kikiras INFS133 March 2015 Agenda Lean Principles and Agile Development Usable Security Secure software development in Agile

More information

Integrating Application Security into the Mobile Software Development Lifecycle. WhiteHat Security Paper

Integrating Application Security into the Mobile Software Development Lifecycle. WhiteHat Security Paper Integrating Application Security into the Mobile Software Development Lifecycle WhiteHat Security Paper Keeping pace with the growth of mobile According to the November 2015 edition of the Ericsson Mobility

More information

A MODEL FOR RISK MANAGEMENT IN AGILE SOFTWARE DEVELOPMENT

A MODEL FOR RISK MANAGEMENT IN AGILE SOFTWARE DEVELOPMENT A MODEL FOR RISK MANAGEMENT IN AGILE SOFTWARE DEVELOPMENT Abstract Author Ville Ylimannela Tampere University of Technology ville.ylimannela@tut.fi This paper researches risk management in agile software

More information

Continuous Delivery / Continuous Deployment How to automate your Deliveries. Bernhard Keprt 24.02.2014

Continuous Delivery / Continuous Deployment How to automate your Deliveries. Bernhard Keprt 24.02.2014 Continuous Delivery / Continuous Deployment How to automate your Deliveries Bernhard Keprt 24.02.2014 Bernhard Keprt Software Developer Teamleader Software Development Job at willhaben.at! Likes Agile

More information

Secure Product Development

Secure Product Development Secure Product Development Overview Dr. Panayotis Kikiras INFS133 March 2015 Why Worry About Security We are a Security Company Embarrassment. Damage in reputation. Direct or Indirect loss of revenue.

More information

Atomate Development Process. Quick Guide

Atomate Development Process. Quick Guide Development Process Quick Guide METHODOLOGY Every project is unique You know your business inside out. You have thought and planned your ideas carefully and are keen to see it live as soon as possible.

More information

ISSECO Syllabus Public Version v1.0

ISSECO Syllabus Public Version v1.0 ISSECO Syllabus Public Version v1.0 ISSECO Certified Professional for Secure Software Engineering Date: October 16th, 2009 This document was produced by the ISSECO Working Party Syllabus Introduction to

More information

Agile Testing of Business Intelligence. Cinderella 2.0

Agile Testing of Business Intelligence. Cinderella 2.0 Agile Testing of Business Intelligence Cinderella 2.0 Armando Dörsek (Verified) & Iris Groenewoudt (Ordina) Nordic Testing Days 6/6/2013 Programme About Us The Customer Background Information Business

More information

Don't leave your Architecture Behind - Kanban-enabled Model Driven Software Development

Don't leave your Architecture Behind - Kanban-enabled Model Driven Software Development Don't leave your Architecture Behind - Kanban-enabled Model Driven Software Development SATURN 2012 May 9 th, 2012 Esther Johnson and Chris Williams Northrop Grumman Aerospace Systems, Software Engineering

More information

Build Your Project Using Scrum Methodology #3 of a Series, by Pavan Kumar Gorakavi, M.S., M.B.A, G.M.C.P, C.A.P.M.

Build Your Project Using Scrum Methodology #3 of a Series, by Pavan Kumar Gorakavi, M.S., M.B.A, G.M.C.P, C.A.P.M. Build Your Project Using Scrum Methodology #3 of a Series, by Pavan Kumar Gorakavi, M.S., M.B.A, G.M.C.P, C.A.P.M. 1. What is Scrum Methodology? Scrum is an innovative software agile methodology that has

More information

Agile Requirements Engineering + LESSONS LEARNED

Agile Requirements Engineering + LESSONS LEARNED Agile Requirements Engineering + LESSONS LEARNED Global Blue TAX-FREE Shopping Merchants Customs Refund Counter Back-Office Issue Tax- Free Form Approve Tax-Free Form Pay Refund Amount Processing Invoicing

More information

The traditional project management uses conventional methods in software project management process.

The traditional project management uses conventional methods in software project management process. Volume 5, Issue 1, January 2015 ISSN: 2277 128X International Journal of Advanced Research in Computer Science and Software Engineering Research Paper Available online at: www.ijarcsse.com Analysis of

More information

Experiences Linking Business Architecture with an Agile/Lean Development Method

Experiences Linking Business Architecture with an Agile/Lean Development Method John Baker, Enterprise Architecture Experiences Linking Business Architecture with an Agile/Lean Development Method Agenda Setting the stage Business Architecture within MasterCard Agile within MasterCard

More information

SAS in clinical trials A relook at project management,

SAS in clinical trials A relook at project management, SAS in clinical trials A relook at project management, tools and software engineering Sameera Nandigama - Statistical Programmer PhUSE 2014 AD07 2014 inventiv Health. All rights reserved. Introduction

More information

Agile Testing. What Students Learn

Agile Testing. What Students Learn Agile Testing Transition sound traditional test practices into an Agile development environment. By using a step-by-step approach, this course documents how to transition from traditional test practices

More information

Issues in Internet Design and Development

Issues in Internet Design and Development Issues in Internet Design and Development Course of Instructions on Issues in Internet Design and Development Week-2 Agile Methods Saad Bin Saleem PhD Candidate (Software Engineering) Users.mct.open.ac.uk/sbs85

More information

Continuous Integration & Automated Testing in a multisite.net/cloud Project

Continuous Integration & Automated Testing in a multisite.net/cloud Project Continuous Integration Automated Testing in a multisite.net/cloud Project Entwicklertag 2013 Karlsruhe 5-Jun-2013 Vladislav Kublanov 1 Speaker Vladislav Kublanov Tata Consultancy Services (TCS) Studied

More information

Scrum and Testing The end of the test role Bryan Bakker 20 maart 2012

Scrum and Testing The end of the test role Bryan Bakker 20 maart 2012 Scrum and Testing The end of the test role Bryan Bakker 20 maart 2012 voordracht georganiseerd door Discussiegroep Software Testing met de steun van Ingenieurshuis, Antwerpen Scrum and Testing... The end

More information

A Cynical View on Agile Software Development from the Perspective of a new Small-Scale Software Industry

A Cynical View on Agile Software Development from the Perspective of a new Small-Scale Software Industry A Cynical View on Agile Software Development from the Perspective of a new Small-Scale Software Industry Apoorva Mishra Computer Science & Engineering C.S.I.T, Durg, India Deepty Dubey Computer Science

More information

Revision History Revision Date 3.0 14.02.10. Changes Initial version published to http://www.isasecure.org

Revision History Revision Date 3.0 14.02.10. Changes Initial version published to http://www.isasecure.org SDLA-312 ISA Security Compliance Institute Security Development Lifecycle Assurance - Security Development Lifecycle Assessment v3.0 Lifecycle Phases Number Phase Name Description PH1 Security Management

More information