 |
 |
 |
 |
 |
 |
|
|
Software Security meets XP
|
|
|
|
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
| n |
XP
is driven by
|
|
|
development
BUT
|
|
|
developers
have not
|
|
|
traditionally
done
|
|
|
security
|
|
|
| n |
XP
has all sorts of “new
|
|
stuff”
that impacts
|
|
|
software
security at the
|
|
|
core
|
|
|
|
n |
Nobody
has given
|
|
|
much
thought to
|
|
|
security
impact (yet)
|
|
|
|
|
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
| n |
Issues
to weave in:
|
|
|
|
n |
Pair
programming
|
|
|
|
n |
Test
driven design
|
|
|
|
n |
Small
iterative releases
|
|
|
n |
On-site
customer
|
|
|
|
n |
Cost
of change (SDLC)
|
|
|
n |
Refactoring
|
|
|
|
n |
Mentorship
|
|
|
|
n |
Security
and
|
|
|
maintenance
|
|
|
|
|
|
|