This article is for new users to SD Elements. It will walk you through some of the help articles, and provides a training plan to start to use SD Elements both as an end user and an administrator.
What is SD Elements?
SD Elements is a software security requirements management solution. Using a short questionnaire, SD Elements automatically generates relevant security requirements for an application, links them to test cases, and delivers them into development tools.
Primer: Basic SD Elements Concepts
Before diving into using the application, it's useful to understand some of the core concepts of the application.
Model and Review an Application
The most common activity in SD Elements is to model an application and use the resulting tasks to build secure software. Select an existing application that you are familiar with, or use a common open source application such as WebGoat. Model the application to the best of your ability; don't worry if you don't have all of the answers.
Once the application is modeled, walk through the steps for an existing application. You don't have to complete every step, but you should have a rough idea of what reviewing an application entails:
If you're an end user of SD Elements, this is really all you need to know to get started. If you are a product/project manager or an administrator, keep reading.
SD Elements boasts powerful customization capabilities. Before you start, you should familiarize yourself with some more key concepts:
Now pick two corporate security standards you want to implement in SD Elements. If you don't have any, use the following two as examples:
All internal applications must have a minimum password length of 16 characters
All applications in the ABC line of business must undergo a penetration test (Note: you'll need to create custom project settings to do this)
Integrate with an ALM Tool
Application Lifecycle Management (ALM) integration is a fundamental capability of SD Elements. Using the app you previously modeled, integrate with one of the supported ALM tools. If you don't already have access to an ALM tool, consider signing up for a free trial with one.
If you've followed these steps, congratulations! You've learned many of the basics of using SD Elements. You can now start to review the User Guide to explore some of the other features, such as security tool integration, role customization, and more advanced content customization