O'Reilly logo

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Fixing an Insecure Software Life Cycle

Book Description

In the race to remain competitive, development teams in many companies are under tremendous pressure to create software on tight deadlines. And in most cases, that means dealing with security bugs only after software is released. But offensive testing and incident response are poor substitutes for good code, strong architecture, and threat-based design.

In this ebook, April C. Wright—security risk and compliance program advisor for a Fortune 15 company—teaches InfoSec professionals how to promote security as an integral part of an organization’s software development life cycle (SDLC). You’ll learn how to analyze existing development processes, gain insight into how developers and other stakeholders view software development, receive practical advice for including secure practices throughout the lifecycle, and learn how to track performance and success of your program.

  • Get guidelines for evaluating your SDLC and rebuilding your development program
  • Understand how developers, project managers, business execs, customers, and other key stakeholders each approach software development
  • Gain active stakeholder participation and management support for SDLC security improvements
  • Work directly with stakeholders to explain secure development, and push for change through policy and compliance
  • Increase software security awareness by integrating development teams with security teams
  • Get started through sample checklists and planning documents