Best Secure Code Practices And Development – We need we need is some type of framework, some type of organizational process, that allows us to do development. To get that code out the door. Now if you want to go old school there is a development model known as waterfall.
Waterfall Model
Now as you look at this you’re going to see that we have little boxes with discrete steps and we’ll even put it in a step pattern like that so water could come dripping down from one box to the next. What we’re looking at here. Like for example the first thing on this example is requirements.
- What are the requirements for this particular application?
- And then design as we’re designing how this is going to work.
Implementation whatever it might be. Waterfall processes and these are very old school have been around for a long time. So you’re you’re you’re very locked in to initially whatever the requirements are even if the requirements might need to change. You’re very phase driven everything is so rigid as we go from one step to the next.
Agile
Agile by itself is a philosophy that says waterfall is not the way to do it. Agile says things like individuals and interactions are more important than processes and tools. Agile says things like working software is more important than comprehensive documentation. Agile is going to say things that would include customer collaboration over just a contract negotiation.
The word about agile is flexibility and being able to move and be able to move quickly with adjustments it needs to get that software out the door. Secure Code Practices
Also Read: CIA Triad of Security – Risk Management – CompTIA Security
Scrum
A very short meeting often standing up that where you basically talk about you know what have I achieved what is my goal to achieve within this certain time period. Are there things like blockers? What might be preventing me from being able to achieve those goals? Very quick meetings that allow us to get together move quickly and move on to the next step of a project.
DevOps
Dev ops is basically the methodologies and tools that we allow for not only development but also operations ergo dev ops, to work together to get product out the door. And then after this we’ll talk about security dev ops which means to add some security. The important thing is that we include development and operations. Just because a product’s been delivered, that doesn’t necessarily mean that its life span is over with.
