Agile Application Security: Enabling Security in a Continuous Delivery Pipeline
暫譯: 敏捷應用安全：在持續交付管道中實現安全性

Laura Bell, Michael Brunton-Spall, Rich Smith, Jim Bird

Agile Application Security: Enabling Security in a Continuous Delivery Pipeline

買這商品的人也買了...

資訊安全書展｜中文簡體2書75折 英文2書85折 詳見活動內容 »

相關主題

商品描述

Agile continues to be the most adopted software development methodology among organizations worldwide, but it generally hasn't integrated well with traditional security management techniques. And most security professionals aren’t up to speed in their understanding and experience of agile development. To help bridge the divide between these two worlds, this practical guide introduces several security tools and techniques adapted specifically to integrate with agile development.

Written by security experts and agile veterans, this book begins by introducing security principles to agile practitioners, and agile principles to security practitioners. The authors also reveal problems they encountered in their own experiences with agile security, and how they worked to solve them.

You’ll learn how to:

  • Add security practices to each stage of your existing development lifecycle
  • Integrate security with planning, requirements, design, and at the code level
  • Include security testing as part of your team’s effort to deliver working software in each release
  • Implement regulatory compliance in an agile or DevOps environment
  • Build an effective security program through a culture of empathy, openness, transparency, and collaboration

商品描述(中文翻譯)

Agile 仍然是全球組織中最被廣泛採用的軟體開發方法論，但它通常與傳統的安全管理技術整合不佳。而且大多數安全專業人士在敏捷開發的理解和經驗上並不跟上趨勢。為了幫助彌合這兩個領域之間的鴻溝，本實用指南介紹了幾種專門為與敏捷開發整合而調整的安全工具和技術。

本書由安全專家和敏捷資深人士撰寫，首先向敏捷從業者介紹安全原則，並向安全從業者介紹敏捷原則。作者還揭示了他們在敏捷安全方面的經驗中遇到的問題，以及他們如何努力解決這些問題。

您將學習如何：

- 在現有開發生命週期的每個階段添加安全實踐
- 將安全與規劃、需求、設計以及代碼層面整合
- 將安全測試納入團隊在每次發佈中交付可運行軟體的努力
- 在敏捷或 DevOps 環境中實施合規性
- 通過同理心、開放性、透明度和協作的文化建立有效的安全計劃

類似商品