Secure, Resilient, and Agile Software Development

Mark Merkow

$90.99

Paperback

Not in-store but you can order this
How long will it take?

Availability Information

We source books from suppliers in Australia and overseas. For books we don't currently have in stock, the time it takes to get them from our suppliers can vary widely - from a few days to a few months - so we check each book with each supplier to determine the expected time it will take to be supplied to us.

We then advise you accordingly. If the time taken to get any book is too long for you, you can let us know and we will cancel or adjust your order, and refund as required.

To find out the anticipated arrival time for specific items prior to ordering, please contact us by phone or email:

Phone +61 2 9264 3111, or 1800 4 BOOKS (1800 4 26657) if outside Sydney:
option 1 Abbey's Bookshop (Crime, History, Science, Kids & more) • info@abbeys.com.au
option 2 Language Book Centre (ESL & Foreign Languages) • language@abbeys.com.au
option 3 Galaxy Bookshop (Sci-fi, Fantasy, Romance, Graphic Novels) • sf@galaxybooks.com.au

QTY:

English

Auerbach
21 January 2023

Software Engineering; Computer security; Privacy & data protection; Computer fraud & hacking

A collection of best practices and effective implementation recommendations that are proven to work, Secure, Resilient, and Agile Software Development leaves the boring details of software security theory out of the discussion as much as possible to concentrate on practical applied software security for practical people. Written to aid your career as well as your organization, the book shows how to gain skills in secure and resilient software development and related tasks. The book explains how to integrate these development skills into your daily duties, thereby increasing your professional value to your company, your management, your community, and your industry. Secure, Resilient, and Agile Software Development was written for the following professionals:

AppSec architects and program managers in information security organizations

Enterprise architecture teams with application development focus

Scrum teams

DevOps teams

Product owners and their managers

Project managers

Application security auditors

With a detailed look at Agile and Scrum software development methodologies, this book explains how security controls need to change in light of an entirely new paradigm on how software is developed. It focuses on ways to educate everyone who has a hand in any software development project with appropriate and practical skills to Build Security In. After covering foundational and fundamental principles for secure application design, this book dives into concepts, techniques, and design goals to meet well-understood acceptance criteria on features an application must implement. It also explains how the design sprint is adapted for proper consideration of security as well as defensive programming techniques. The book concludes with a look at white box application analysis and sprint-based activities to improve the security and quality of software under development.

By: Mark Merkow
Imprint: Auerbach
Country of Publication: United Kingdom
Dimensions: Height: 234mm, Width: 156mm,
Weight: 335g
ISBN: 9781032475011
ISBN 10: 1032475013
Pages: 238
Publication Date: 21 January 2023
Audience: Professional and scholarly , Undergraduate
Format: Paperback
Publisher's Status: Active

Dedication Contents Preface About the Author Chapter 1: Today’s Software Development Practices Shatter Old Security Practices Chapter 2: Deconstructing Agile and Scrum Chapter 3: Learning Is FUNdamental! Chapter 4: Product Backlog Development—Building Security In Chapter 5: Secure Design Considerations Chapter 6: Security in the Design Sprint Chapter 7: Defensive Programming Chapter 8: Testing Part 1: Static Code Analysis Chapter 9: Testing Part 2: Penetration Testing/Dynamic Analysis/IAST/RASP Chapter 10: Securing DevOps Chapter 11: Metrics and Models for AppSec Maturity Chapter 12: Frontiers for AppSec Chapter 13: AppSec Is a Marathon—Not a Sprint! Appendix A: Sample Acceptance Criteria for Security Controls Appendix B: Resources for AppSec Index

Mark S. Merkow, CISSP, CISM, CSSLP, works at WageWorks in Tempe, Arizona, leading application security architecture and engineering efforts in the office of the CISO. Mark has over 40 years of experience in IT in a variety of roles, including application development, systems analysis and design, security engineering, and security management. Mark holds a Master of Science in Decision and Information Systems from Arizona State University (ASU), a Master of Education in Distance Education from ASU, and a Bachelor of Science in Computer Information Systems from ASU. In addition to his day job, Mark engages in a number of extracurricular activities, including consulting, course development, online course instruction, and book writing. Mark has authored or co-authored 17 books on IT and has been a contributing editor to four others. Mark remains very active in the information security community, working in a variety of volunteer roles for the Phoenix Chapter of (ISC)2®, ISACA®, and OWASP. You can find Mark’s LinkedIn® profile at: linkedin.com/in/markmerkow

Reviews for Secure, Resilient, and Agile Software Development

Modern software development breaks the old ways of security. This book is practical, actionable, relatable, and most importantly, current. It should be required reading for all Agile and DevOps teams.-Ed Adams, Chief Executive Officer, Security Innovation, Inc. Modern software development breaks the old ways of security. This book is practical, actionable, relatable, and most importantly, current. It should be required reading for all Agile and DevOps teams.-Ed Adams, Chief Executive Officer, Security Innovation, Inc. Secure, Resilient, and Agile Software development is in touch with where the modern software development world is today and highlights the importance of security in a DevOps world. Mark captures the essence of how to educate developers and connect with them as Security Champions and the importance of a strong organizational security culture. Education, requirements, secure design principles, threat modeling, defensive programming, testing, code review, tools, and metrics; this book has it all. This book is a reference for those starting new programs, and for established programs that need new ideas.-Chris Romeo, CEO of Security Journey, co-host of the Application Security Podcast