eXtreme Security Engineering: On Employing XP Practices to Achieve "Good Enough Security" without Defining It

This paper examines practices of eXtreme Programming (XP) on the subject of their application to the development of security solutions. We introduce eXtreme Security Engineering (XSE), an application of XP practices to security engineering, and discuss its potential benefits and applicability scope. We argue that XSE could help achieve "good enough security" while avoiding defining a priory what it is.