Agile development methodologies are gaining acceptance in the software industry. If they are to be used for constructing securitycritical solutions, what do we do about assurance? This paper examines how conventional security assurance suits agile methodologies for developing software-intensive systems. It classifies security assurance methods and techniques with regards to their clash with agile development. Suggestions are made for alleviating mismatches between these two methods..
Beznosov & Kruchten REF examined mismatches between security assurance techniques and agile development methods.
Towards agile security assurance
NSPW '04
Computer Science