InfoQ Homepage Security Content on InfoQ

Articles

RSS Feed

Newer Older

Evo: The Agile Value Delivery Process, Where ‘Done’ Means Real Value Delivered; Not Code

Current agile practices are far too narrowly focused on delivering code to users and customers. There is no systems-wide view of other stakeholders, of databases, and anything else except the code. This article describes what ‘Evo’ is at core, and how it is different from other Agile practices, and why ‘done’ should mean ‘value delivered to stakeholders’.

Kai Gilb Tom Gilb
on Jan 26, 2015
Getting RID of Risk with Agile

One of the largest areas of waste in development are poorly formed requirements. This post presents a very simple technique that can be applied to all user stories to improve quality and reduce waste, as well as examining how this can fit into your current planning and estimation workflow via the underused ‘definition of ready’. It’s a very actionable concept that you can apply immediately.

Jacob Creech
on Jan 21, 2015
How Well Do You Know Your Personae Non Gratae?

In this article, author discusses three techniques to defend against malicious users in software systems. These techniques includes creating personas to think strategically about the mischief a malicious user might attempt, misuse cases used to determine how the software should respond to unintended use, and activity diagrams annotated with security concerns.

Jane Cleland-Huang
on Nov 27, 2014
The Resurrection of Product Risk Analysis

Product risk analysis (PRA) is not only useful in testing but is also applicable during the various phases of sequential or agile system development. This article introduces a different application of PRA that elevates it from project level to domain level. It shows how you can go from risk and requirement-based testing to risk and requirement-based development.

Chris Schotanus
on Nov 19, 2014
Testing the Internet of Things: The Human Experience

Mobile and embedded devices, more than any other technology, are an integral part of our lives and have the potential to become a part of us. This article discusses what “human experience” testing is and is not, and uses concepts from human computer interaction design theory to establish a framework for developing “human experience” test scenarios.

Gerie Owen
on Nov 09, 2014
Shadow IT Risk and Reward

Chris Haddad explains in this article what Shadow IT is, what role it plays in the enterprise and why Enterprise IT needs to embrace it, adapt and address Shadow IT requirements, autonomy, and goals.

Chris Haddad
on Oct 08, 2014
Q&A with Barry Boehm and Richard Turner on The Incremental Commitment Spiral Model

The Incremental Commitment Spiral Model describes a process model generator. InfoQ interviewed the authors about the principles underlying the Incremental Commitment Spiral Model (ICSM), applying the ICSM, benefits that organization can get from it, and how organizations can use the ICSM to determine under what conditions to use software-intensive agile frameworks like Scrum, DSDM, SAFe, or DAD.

Ben Linders
on Aug 27, 2014
Article Series: Automation in the Cloud and Management at Scale

Cloud computing is more than just fast self-service of virtual infrastructure. Developers and admins are looking for ways to provision and manage at scale. This InfoQ article series will focus on automation tools and ideas for maintaining dynamic pools of compute resources.

Richard Seroter
on Jun 23, 2014
A Pragmatic Approach to Scaling Security in the Cloud

Security. Cloud. Two words that are almost always together but rarely happily. Read on to learn why that isn’t the case and what you need to known about securing your critical infrastructure in the cloud.

Mark Nunnikhoven
on Jun 06, 2014
From MDM to MDM: From Managing Devices to Apps to Data

Mobile operations management (MOM) is one of the top priorities of today’s modern enterprise. While the first generation of MOM solutions evolved around the management of mobile devices and applications, organizations have quickly realized that an effective enterprise mobile infrastructure requires addressing a more difficult challenge: managing and securing mobile business data.

Jesus Rodriguez
on May 22, 2014
How to Protect Valuable or Personal Data on PC, Hard Drive and Flash Drive

Approximately 60% of all computers sold worldwide today are portable. Portable computers are taken everywhere, making them an easy target for criminals, especially for the private data they contain. Even a failed hard drive that you send back to your vendor for warranty is a potentially at risk. How can your personal data be protected? With one word - encryption!

Sergey Solomatin
on Mar 28, 2014
Answering Common Cloud Security Questions from CIOs

With the news stories of possible data breaches at enterprises like Target, and the current trend of companies migrating to cloud environments for the flexibility, scalability, agility, and cost-effectiveness they offer, CIOs have been asking hard questions about cloud security.

Gilad Parran-Nissany
on Feb 12, 2014