Software Security meets XP
n XP is driven by
development BUT
developers have not
traditionally done
security
n XP has all sorts of “new
stuff” that impacts
software security at the
core
n Nobody has given
much thought to
security impact (yet)
n Issues to weave in:
n Pair programming
n Test driven design
n Small iterative releases
n On-site customer
n Cost of change (SDLC)
n Refactoring
n Mentorship
n Security and
maintenance