QUOTE
Microsoft to release security guidelines for Agile
By Jeremy Kirk
November 9, 2009 03:03 AM ET
IDG News Service - Microsoft will release on Tuesday guidelines for developers building online applications and for those using the Agile code-development process.
The Agile guidelines apply principles from Microsoft's Security Development Lifecycle (SDL) to Agile, an umbrella term for a development model frequently used for Web-based applications released under short deadlines, called "sprints."
Microsoft adopted the SDL following the company's pledge in 2002 to build more secure code after several high-profile worms and other malicious software posed dangerous risks to its customers.
But the original SDL doesn't fit the Agile process. Agile differs in that developers have a set time in which to develop certain features, after which the application is immediately released in order to get customer feedback, said Bryan Sullivan, security program manager for Microsoft.
More:
http://www.computerworld.com/s/article/914...lines_for_Agile
By Jeremy Kirk
November 9, 2009 03:03 AM ET
IDG News Service - Microsoft will release on Tuesday guidelines for developers building online applications and for those using the Agile code-development process.
The Agile guidelines apply principles from Microsoft's Security Development Lifecycle (SDL) to Agile, an umbrella term for a development model frequently used for Web-based applications released under short deadlines, called "sprints."
Microsoft adopted the SDL following the company's pledge in 2002 to build more secure code after several high-profile worms and other malicious software posed dangerous risks to its customers.
But the original SDL doesn't fit the Agile process. Agile differs in that developers have a set time in which to develop certain features, after which the application is immediately released in order to get customer feedback, said Bryan Sullivan, security program manager for Microsoft.
More:
http://www.computerworld.com/s/article/914...lines_for_Agile