Building in Security at Agile Speed - Hardcover

Ransome, James; Schoenfield, Brook

 
9780367433260: Building in Security at Agile Speed

Inhaltsangabe

Detailing the people, processes, and technical aspects of software security, Building in Security at Agile Speed emphasizes that the people element remains critical because software is developed, managed, and exploited by humans. The book presents a step-by-step process for software security that is relevant to today’s technical, operational, business, and development environments with a focus on what humans can do to control and manage the process in the form of best practices and metrics. There will always be security issues, but this book helps to minimize them when software is finally released and deployed.

Everything runs on software. Security must become an integral attribute of our software or we face certain failure. Today's high-speed and rapidly changing development environments demand equally high-speed security practices. Still, achieving security remains a human endeavor, a core part of designing, generating and verifying software. Dr. James Ransome and Brook S.E. Schoenfield have built upon their previous works to explain that security starts with people; ultimately, humans generate software security. People collectively act through a particular and distinct set of methodologies, processes, and technologies that the authors have brought together into a newly designed, holistic, generic software development lifecycle that facilitates software security at Agile, DevOps speed. —

Eric. S. Yuan, Founder and CEO, Zoom Video Communications, Inc.

As the speed of software innovation continues at a breakneck pace and forms the foundation of our worlds, it is essential that we embrace a mantra that ensures security is baked in throughout any development process. Ransome and Schoenfield leverage their abundance of experience and knowledge to clearly define why and how we need to build this new model around an understanding that the human element is the ultimate key to success.

Building in Security at Agile Speed is a must read for anyone hoping to be a change catalyst and leader in this SDLC revolution.

Jennifer Sunshine Steffens, CEO of IOActive

Both practical and strategic,

Building in Security at Agile Speed is an invaluable resource for change leaders committed to building secure software solutions in a world characterized by increasing threats and uncertainty. Ransome and Schoenfield brilliantly demonstrate why creating robust software is a result of not only technical, but deeply human elements of agile ways of working. This is both a reference guide and a source of inspiration - highly recommended! —Jorgen Hesselberg, author of Unlocking Agility and Cofounder of

Comparative Agility

The proliferation of open source components and distributed software services makes the principles detailed in

Building in Security at Agile Speed more relevant than ever. Incorporating the principles and detailed guidance in this book into your SDLC is a must for all software developers and IT organizations.

George K Tsantes, CEO of Cyberphos, former partner at Accenture and Principal at EY

Die Inhaltsangabe kann sich auf eine andere Ausgabe dieses Titels beziehen.

Über die Autorin bzw. den Autor

Dr. James Ransome is the Chief Scientist for CyberPhos, an early-stage cybersecurity startup, and continues to do ad hoc consulting. He also serves on the Board of Directors for the Bay Area CSO Council. Most recently, Dr. Ransome was the Senior Director, Security Development Lifecycle (SDL) Engineering, in the Intel Product Security and Assurance, Governance and Operations (IPAS GO) Group, where he led and developed a team of SDL engineers, architects, and product security experts that implemented and drove security practices across all of Intel. Prior to that, he was the Senior Director of Product Security and PSIRT at Intel Security and McAfee, LLC. Over a six-year period, he built, managed, and enhanced a developer-centric, self-sustaining, and scalable software security program, with an extended team of 120 software security architects embedded in each product team. All of this was a result of implementing and enhancing the model described in his most recent book, Core Software Security: Security at the Source, which has become a standard reference for many corporate security leaders who are responsible for developing their own SDLs.

Brook S. E. Schoenfield

is the author of Secrets of a Cyber Security Architect, Securing Systems: Applied Security Architecture and Threat Models, and Chapter 9: Applying the SDL Framework to the Real World in Core Software Security: Security at the Source.

He has been published by CRC Press, Auerbach, SANS Institute, Cisco, SAFECode, and the IEEE. Occasionally, he even posts to his security architecture blog, brookschoenfield.com.

„Über diesen Titel“ kann sich auf eine andere Ausgabe dieses Titels beziehen.

Weitere beliebte Ausgaben desselben Titels

9781032010052: Building in Security at Agile Speed

Vorgestellte Ausgabe

ISBN 10:  1032010053 ISBN 13:  9781032010052
Verlag: Auerbach Publications, 2021
Softcover