secure-development-guide

• Some useful references
  • Standards
  • Code review/audit
  • Fuzzing
  • Web security
  • Books

Some useful references

No document is complete without links to pages where you can expand your knowledge. This page intends to collect some useful links. We will endeavour to keep this page updated, though there is no guarantee that it will always reflect the newest material available on the internet.

Standards

• Executive order on improving nation’s cybersecurity
• Secure Software Development Framework (SSDF)
• NIST SP 800-100, Information Security Handbook

Code review/audit

• OpenSSF Concise Guide for Evaluating Open Source Software
• OWASP Code Review Guide
• Fedora Defensive coding guide

Fuzzing

• Efficient Fuzzing Guide
• OWASP Fuzzing guide

Web security

• OWASP Web Application Penetration Checklist
• OWASP Web Application Security Quick Reference Guid

Books

In case you are into books, then some of the best titles for secure development you can read about:

• Designing Secure Software - A Guide for Developers
• The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities
• Cryptography Engineering: Design Principles and Practical Applications
• The Web Application Hacker’s Handbook: Finding and Exploiting Security Flaws