corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0875f-b7bb-7379-ba9c-ab82ae4b2af4

12 steps to secure software: a prioritized roadmap

christian-schneider.net · published 13 April 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at christian-schneider.net Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
76
Words captured
4,392

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://csrc.nist.gov/pubs/sp/800/50/final
csrc.nist.gov
https://christian-schneider.net/training/live-hacking-event/
christian-schneider.net
https://github.com/anchore/grype
github.com
https://github.com/aquasecurity/trivy
github.com
https://github.com/jeremylong/DependencyCheck
github.com
https://dependencytrack.org
dependencytrack.org
https://aws.amazon.com/blogs/devops/building-end-to-end-aws-devsecops-ci-cd-pipeline-with-open-source-sca-sast-and-dast-tools/
aws.amazon.com
https://azure.microsoft.com/en-us/products/devops/github-advanced-security
azure.microsoft.com
https://www.cisecurity.org/cis-benchmarks/
cisecurity.org
https://github.com/docker/docker-bench-security
github.com
https://github.com/aquasecurity/kube-bench
github.com
https://github.com/GoogleContainerTools/distroless
github.com
https://kics.io
kics.io
https://cisofy.com/lynis/
cisofy.com
https://docs.aws.amazon.com/prescriptive-guidance/latest/best-practices-cdk-typescript-iac/security-formatting-best-practices.html
docs.aws.amazon.com
https://docs.aws.amazon.com/securityhub/latest/userguide/cis-aws-foundations-benchmark.html
docs.aws.amazon.com
https://aws.amazon.com/inspector/
aws.amazon.com
https://learn.microsoft.com/en-us/azure/defender-for-cloud/azure-devops-extension
learn.microsoft.com
https://learn.microsoft.com/en-us/compliance/regulatory/offering-CIS-Benchmark
learn.microsoft.com
https://find-sec-bugs.github.io/
find-sec-bugs.github.io
https://security-code-scan.github.io/
security-code-scan.github.io
https://securego.io
securego.io
https://brakemanscanner.org/
brakemanscanner.org
https://pypi.org/project/bandit/
pypi.org
https://github.com/ajinabraham/nodejsscan
github.com
https://github.com/FloeDesignTechnologies/phpcs-security-audit
github.com
https://www.sonarqube.org
sonarqube.org
https://sonarcloud.io
sonarcloud.io
https://semgrep.dev/explore
semgrep.dev
https://aws.amazon.com/blogs/devops/integrating-sonarcloud-with-aws-codepipeline-using-aws-codebuild/
aws.amazon.com
https://secdevtools.azurewebsites.net
secdevtools.azurewebsites.net
https://owasp.org/www-project-top-ten/
owasp.org
https://owasp.org/API-Security/
owasp.org
https://cheatsheetseries.owasp.org/
cheatsheetseries.owasp.org
https://aws.amazon.com/architecture/well-architected/
aws.amazon.com
https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/welcome.html
docs.aws.amazon.com
https://learn.microsoft.com/en-us/azure/security/develop/secure-dev-overview
learn.microsoft.com
https://christian-schneider.net/training/web-security-bootcamp/
christian-schneider.net
https://aws.amazon.com/training/learn-about/security/
aws.amazon.com
https://www.microsoft.com/en-us/trust-center/product-overview
microsoft.com
https://owasp.org/www-project-application-security-verification-standard/
owasp.org
https://aws.amazon.com/security-hub/
aws.amazon.com
https://azure.microsoft.com/en-us/products/defender-for-cloud/
azure.microsoft.com
https://www.threatmodelingmanifesto.org
threatmodelingmanifesto.org
https://attacktree.online
attacktree.online
https://threagile.io
threagile.io
https://aws.amazon.com/well-architected-tool/
aws.amazon.com
https://www.microsoft.com/en-us/securityengineering/sdl/threatmodeling
microsoft.com
https://christian-schneider.net/service/application-pentest/
christian-schneider.net
https://owasp.org/www-project-web-security-testing-guide/
owasp.org
https://aws.amazon.com/security/penetration-testing/
aws.amazon.com
https://learn.microsoft.com/en-us/azure/security/fundamentals/pen-testing
learn.microsoft.com
https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html
cheatsheetseries.owasp.org
https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html
cheatsheetseries.owasp.org
https://cheatsheetseries.owasp.org/cheatsheets/Multifactor_Authentication_Cheat_Sheet.html
cheatsheetseries.owasp.org
https://cheatsheetseries.owasp.org/cheatsheets/Microservices_based_Security_Arch_Doc_Cheat_Sheet.html
cheatsheetseries.owasp.org
https://cheatsheetseries.owasp.org/cheatsheets/Microservices_Security_Cheat_Sheet.html
cheatsheetseries.owasp.org
https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Testing_Automation_Cheat_Sheet.html
cheatsheetseries.owasp.org
https://aws.amazon.com/iam/
aws.amazon.com
https://aws.amazon.com/cognito/
aws.amazon.com
https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-id
microsoft.com
https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Security_Cheat_Sheet.html
cheatsheetseries.owasp.org
https://cheatsheetseries.owasp.org/cheatsheets/Cryptographic_Storage_Cheat_Sheet.html
cheatsheetseries.owasp.org
https://docs.aws.amazon.com/kms/latest/developerguide/overview.html
docs.aws.amazon.com
https://aws.amazon.com/artifact/
aws.amazon.com
https://learn.microsoft.com/en-us/azure/key-vault/
learn.microsoft.com
https://servicetrust.microsoft.com
servicetrust.microsoft.com
https://www.ossec.net/about/
ossec.net
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf
nvlpubs.nist.gov
https://aws.amazon.com/guardduty/
aws.amazon.com
https://docs.microsoft.com/en-us/azure/sentinel/
docs.microsoft.com
https://owasp.org/www-project-defectdojo/
owasp.org
https://docs.aws.amazon.com/cloudwatch/
docs.aws.amazon.com
https://learn.microsoft.com/en-us/azure/azure-monitor/
learn.microsoft.com
https://christian-schneider.net/consulting/devsecops-pipeline/
christian-schneider.net
https://christian-schneider.net/consulting/agile-threat-modeling/
christian-schneider.net