It’s generally accepted that built-in app security controls are more effective than bolted-on app security controls. In order to produce rugged software, though, developers need procedures and tools that will help them identify and remediate potential security weaknesses before an app leaves QA. That’s where Gauntlt comes in. Gauntlt’s slogan is, “Be mean to your code and like it,” and the Gauntlt Starter Kit is designed to help you beat up your code pre-deployment. Jerod’s going to introduce you to the Gauntlt Starter Kit and show you how you can bake Gauntlt into your own app dev projects.

2. •
•
•
•
•

3. From https://www.ruggedsoftware.org/

4. •
•
•
•
•
•
•

5. •
•
•
•

6. •
•
•
•
•
•
HTTPS://WWW.OWASP.ORG/INDEX.PHP/TESTING_GUIDE_INTRODUCTION#DERIVING_SECURITY_TEST_REQUIREMENTS

7. •
•
HTTPS://WWW.OWASP.ORG/INDEX.PHP/TESTING_GUIDE_INTRODUCTION#DERIVING_SECURITY_TEST_REQUIREMENTS

8. •
•
•
•
•
HTTPS://WWW.OWASP.ORG/INDEX.PHP/TESTING_GUIDE_INTRODUCTION#DERIVING_SECURITY_TEST_REQUIREMENTS

9. •
•
•
•
HTTPS://WWW.OWASP.ORG/INDEX.PHP/TESTING_GUIDE_INTRODUCTION#DERIVING_SECURITY_TEST_REQUIREMENTS

11. •
•
•
•
•
•
•
•
•
•
From http://www.testingexcellence.com/top-10-negative-test-cases/

12. HTTPS://BLOGS.ADOBE.COM/SECURITY/2014/07/OVERVIEW-OF-BEHAVIOR-DRIVEN-DEVELOPMENT.HTML

13. https://cucumber.io/

14. From GitHub: a ruggedization
framework that embodies the
principle "be mean to your
code"

15. •
•
•
•
•
•
•
•
•
On GitHub at https://github.com/gauntlt/gauntlt/tree/master/examples

17. •
•
•
•
•
•
•

18. •
•
• GIT@GITHUB.COM:GAUNTLT/GAUNTLT-STARTER-KIT
•
•
•

19. •
• HTTPS://WWW.VIRTUALBOX.ORG/
•
• HTTPS://WWW.VAGRANTUP.COM/

20. http://samurai.inguardians.com/

21. •
• HTTPS://GITHUB.COM/GAUNTLT/GAUNTLT/ARCHIVE/MASTER.ZIP
•
•
•

22. •
•
•
•
•
•
•
•

24. •
• HTTPS://WWW.RUGGEDSOFTWARE.ORG/
• HTTPS://WWW.RUGGEDSOFTWARE.ORG/WP-CONTENT/UPLOADS/2013/11/RUGGED-HANDBOOK-
V7.PDF
• HTTPS://WWW.RUGGEDSOFTWARE.ORG/WP-CONTENT/UPLOADS/2013/11/RUGGED-IMPLEMENTATION-
GUIDE-V4.PDF
•
• HTTP://WWW.SLIDESHARE.NET/WICKETT/SECURITY-TESTING-WITH-GAUNTLT

25. •
• HTTPS://WWW.OWASP.ORG/INDEX.PHP/PHOENIX/TOOLS
•
• HTTPS://WWW.OWASP.ORG/IMAGES/5/52/OWASP_TESTING_GUIDE_V4.PDF

26. HTTPS://TWITTER.COM/SLANDAIL
HTTPS://WWW.LINKEDIN.COM/IN/SLANDAIL
HTTP://SLANDAIL.NET/