The Software Assurance Forum for Excellence in Code (SAFECode) last week released “Practical Security Stories and Security Tasks for Agile Development Environments,” a paper that guides agile software developers in secure software development practices.
This new paper provides security-focused stories and security tasks that can easily be integrated into agile-based development environments. The guidance in the paper is not intended to replace security experts, but rather seeks to add a level of self-service for agile developers.
“Because the tasks are translated in a format that agile team members are familiar with, the role of the security expert can take a backseat during development,” Reeny Sondhi, director of product security assurance of the product security office at EMC and one of the authors of the paper, told SD Times in an interview.
