Главная
Study mode:
on
1
Intro
2
Technical debt
3
Security debt.
4
Security debt-source?
5
Security debt and SDLS
6
Accruing debt based on risk
7
Latent debt resilience
8
Debt Management
9
Why we care
10
Assigning interest rates to security debt
11
Repayment-New version requirements
12
Repayment -Severity prioritization
13
Repayment - Percentage reduction
14
Debt Expiry
15
Debt Overhang
16
Strategic Debt Restructuring
17
Bankruptcy
18
Non Repayment - Consequence Planning
19
Conclusions
Description:
Explore software security debt in modern development through this 32-minute conference talk delivered by Ollie Whitehouse at 44CON 2012 in London. Delve into the concept of technical debt and its security implications, understanding how it accrues based on risk and its impact on the software development lifecycle. Learn about latent debt resilience, effective debt management strategies, and the importance of assigning interest rates to security debt. Discover various repayment methods, including new version requirements, severity prioritization, and percentage reduction. Examine debt expiry, debt overhang, and strategic debt restructuring. Consider the consequences of non-repayment and potential bankruptcy scenarios. Gain valuable insights into managing software security austerity and its long-term effects on development processes.

Software Security Austerity - Software Security Debt in Modern Software Development

44CON Information Security Conference
Add to list