Software Security Maturity Models

Posted on Actualizado enn

Cigital BSIMM other OWASP Open SAMM

BSSIM There are 10 practices oganized into four domains

1.Strategy and Metrics

2.Compliance (following law or norm) and Policy

3.Training

4.Attack Models

5.Security Features  and Design

6.Standards and requirements

7.Architecture Analysis

8.Code Review

9.Security Testing

10.Penetration Testing

11.Software Environment

12.Configuration and Vulnerability Managment

SDL Microsoft

Training Phase

  • SDL Practice #1: Core Security TrainingThis practice is a prerequisite for implementing the SDL. Foundational concepts for building better software include secure design, threat modeling, secure coding, security testing, and best practices surrounding privacy.
Anuncios

Responder

Introduce tus datos o haz clic en un icono para iniciar sesión:

Logo de WordPress.com

Estás comentando usando tu cuenta de WordPress.com. Cerrar sesión / Cambiar )

Imagen de Twitter

Estás comentando usando tu cuenta de Twitter. Cerrar sesión / Cambiar )

Foto de Facebook

Estás comentando usando tu cuenta de Facebook. Cerrar sesión / Cambiar )

Google+ photo

Estás comentando usando tu cuenta de Google+. Cerrar sesión / Cambiar )

Conectando a %s