Agile and Security - Oil and Water
Explore the intersection of Agile methodologies and security practices in this 57-minute conference talk from BSides Nashville 2015. Delve into the challenges of integrating security into Agile development processes, examining topics such as development and security assurance, meeting efficiency, and knowledge sharing. Learn about innovative approaches like the Pool Model and Role Engineering to address these challenges. Discover practical strategies for implementing security requirements, including the use of wikis, checklists, and cross-team collaboration. Gain insights on balancing Agile principles with security needs, and understand how to effectively incorporate security ownership within Agile teams. Conclude with an exploration of OpenSDL and nonfunctional requirements, providing a comprehensive overview of harmonizing Agile and security practices in software development.