Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>I guess starting with secure development would mean three steps:</p> <p><strong>Identify and understand the big picture: what may go wrong</strong></p> <p>This means understanding the technical aspects of a vulnerability and how it helps making things go wrong. </p> <p>Typically, I'd go with the OWASP's Top 10 web application security vulnerabilities (google: owasp top 10 2007).</p> <p>If you don't understand it, then, please, ask for guidance. Understanding such a document doesn't directly tells you how to build secure code but it is a good indicator on your level of understanding on secure development.</p> <p><strong>Find good general practices that lead to secure development</strong></p> <p>While many documents tell you how things may go wrong, few resources actually tell you how to avoid them in a general way. </p> <p>Currently, I'd mostly recommend these resources: </p> <ul> <li>David Rook's "Secure Development principles" (google: david rook principles of secure development)</li> <li>OWASP's Top 10 vulnerabilities protection section pages (each entry is clickable on the online version of the Top 10)</li> </ul> <p><strong>Find resources tailored for your technology</strong></p> <p>Get access to resources that tell you "how to do this" in a language that you speak. Typically, C#. The MSDN portal provides developers with many security checklists (<a href="http://msdn.microsoft.com/en-us/library/ms998408.aspx" rel="nofollow noreferrer">http://msdn.microsoft.com/en-us/library/ms998408.aspx</a>). </p> <p>Finally, get into it: connect to regular input on application security, find blogs, read news (build Google alerts with some vulnerabilities names or words such as 'application security' or 'secure development') and see what happens.</p> <p>Hope it helps.</p> <p>sb</p> <p>PS: sorry for the 'google' links, I am a new user and can only post 1 url in my answers :(</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload