000000117 001__ 117
000000117 005__ 20130522141951.0
000000117 037__ $$aLERSSE-PRESENTATION-2006-057
000000117 041__ $$aeng
000000117 100__ $$aKonstantin Beznosov
000000117 245__ $$aTowards Agile Security Assurance
000000117 260__ $$c2006-10-18
000000117 520__ $$aAgile development methods are promising to become the next generation replacing waterfall development. They could eventually replace the plan-driven methodologies not only in pure software solutions in such benign domains as word processing and office automation but also in security-critical projects with both software and hardware parts developed or integrated together.  At the same time, the accepted practices for security assurance appear to go totally contrary to agile approaches. Can and how security assurance be adopted by agile developers? What needs to be done for the adoption to happen? This talk makes a first step toward answering these questions in a pursuit for agile security assurance. It first explains what computer and software security is and why it is hard. Then, it re-examines the conventional practices of security assurance to find out how well they suite agile development methodologies. It classifies security assurance methods and techniques with regards to their clash with agile development. For those in conflict, ways of alleviating it are suggested.
000000117 6531_ $$aagile methods
000000117 6531_ $$aeXtreme Programming
000000117 6531_ $$aXP
000000117 6531_ $$asecurity assurance
000000117 6531_ $$aengineering secure software
000000117 8560_ $$fqiangw@ece.ubc.ca
000000117 8564_ $$uhttp://lersse-dl.ece.ubc.ca/record/117/files/117.pdf$$yTransfer from CDS 0.99.7
000000117 909C4 $$pKonstantin Beznosov	 "Towards Agile Security Assurance," presentation given at the Calgary Agile Methods User Group (CAMUG), Calgary, Alberta, Canada, University of Calgary, 3 October, 2006.
000000117 980__ $$aPRESENTATION