|
|
Secure Programming
Software security specifications Feb 21 2005 04:17PM i.matilde@gmail.com (i matilde gmail com) (3 replies) Re: Software security specifications Feb 22 2005 07:04AM udayan pathak (udayan_pathak yahoo com) (1 replies) Re: Software security specifications Feb 22 2005 03:53PM i.matilde (at) gmail (dot) com [email concealed] (i matilde gmail com) Re: Software security specifications Feb 22 2005 05:22AM Jeff Williams (jeff williams aspectsecurity com) |
|
Privacy Statement |
<i.matilde (at) gmail (dot) com [email concealed]> wrote:
> I need to develop a policy that will list security requirements for
> new applications developed internally or by contractors, general
> specifications like validate input ecc...., I am looking for some good
> resources on the subject, any recommendations?
Hello list members,
I find the topic very interesting as I am working on it right now,
focusing on web applications development.
As a starting point I've found very useful insights from the OWASP
guide (http://www.owasp.org/documentation/guide.html) and from one
book available on MSDN
(http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnets
ec/html/ThreatCounter.asp).
Of course, the usual secure programming resources (Wheeler, etc.) are
helpful too.
HTH,
ang
[ reply ]