Secure Agile
Software Development
Addressing vulnerabilities
“Agile” application development helps to improve the Software Development Life Cycle (SDLC) by promoting a rapid and flexible response to changes in the application.
We prefix agile with the word “Secure” because we include a security element to our approach, addressing vulnerabilities early in the application development. Our approach to secure agile is to work closely with the application stakeholders often to gather requirements and evolve solutions through collaboration between cross-functional teams.
We will work with your team to develop custom applications from inception to completion, working the entire process of the application lifecycle. In addition to custom applications, we work with commercial-off-the-shelf (COTS), modifiable-off-the-shelf (MOTS), and government-off-the-shelf (GOTS) applications.
Application Integration
These days, it is nearly impossible to develop a secure application without some type of integration. Whether you you have to integrate legacy systems, or even newer enterprise cloud applications, you have to address the challenges of integration.
We understand the complexities of integration and adopt a secure Continuous Integration (CI) process with our customers. We infuse the security elements up front so that we address any loopholes, specifically when integrating multiple systems.
During a new agile application development, our CI process involves producing a clean build of the system several times per day. KCS agile teams typically configure CI to include automated compilation, unit test execution, and source control integration.
-
When dealing with existing applications, we recommend the following practices:
-
Document a clear baseline of initial requirements including current and future road-map for both applications and infrastructure.
-
When possible, select top tier vendors that can work well in heterogeneous environments.
-
Deploy numerous testing scenarios and prototype solutions.
1
