Author Archives: Aram Hovsepyan

28

Dec

How to conduct effective SAMM assessments

• Aram Hovsepyan
• OWASP, Security

For the past 20 years web applications have always been the number one action vector […]

Read Article

26

Sep

A comparison of NIST CSF 2.0 and OWASP SAMM

• Aram Hovsepyan
• NIST SSDF, OWASP, Security

NIST has finalized the Cybersecurity Framework (CSF) 2.0. CSF 2.0 focuses on understanding, assessing, prioritising,[…]

Read Article

28

Mar

The cost of introducing application security at a scale-up

• Aram Hovsepyan
• Application Security, Security

Software security is now a number one risk worldwide. It is literally on the US[…]

Read Article

14

Jan

How to Pick the Security Tools for your DevSecOps

• Aram Hovsepyan
• Application Security, SAMM, Secure Software Development, Security, Software security

Introduction to the security tool frenzy “Invest in Outcomes, not Tools and Capabilities” – Paul[…]

Read Article

18

Sep

NIST SSDF: What it is and how to implement it

• Aram Hovsepyan
• NIST SSDF, SAMM, Secure Software Development

September 14, 2022, the Executive Office of the US President has released the memorandum  M-22-18.[…]

Read Article

09

Jun

OWASP SAMM: Education and Guidance

• Aram Hovsepyan
• OWASP, Secure Software Development, Security Software Engineer, Software security

Ever heard the saying “our team is our greatest asset”. I’d dare to say that[…]

Read Article

24

May

OWASP SAMM: Secure Architecture

• Aram Hovsepyan
• SAMM, Secure Software Development, Security Software Engineer

Secure architecture in a nutshell The secure architecture practice focuses on security during the architectural[…]

Read Article

26

Apr

OWASP SAMM: Pragmatic Threat Modeling Best Practices

• Aram Hovsepyan
• Privacy by Design, SAMM, Secure Software Development, Security Software Engineer

Threat modeling yields the highest return on investment when it comes to your Application Security[…]

Read Article

11

Apr

OWASP SAMM: Secure Build

• Aram Hovsepyan
• Privacy by Design, Secure Software Development, Security Software Engineer

The secure deployment of your software is a central piece in your secure software development[…]

Read Article

24

Jan

BSIMM vs SAMM: Which model is better?

• Aram Hovsepyan
• BSIMM, SAMM, Secure Software Development, Security, Software security

Cybersecurity is currently a “hype.” It was a “hype” in 2001 and has remained so[...]

Read Article

24

Dec

OWASP SAMM: your map and itinerary in the security journey.

• Aram Hovsepyan
• OWASP, SAMM, Software security

  This article was originally posted in 2021 when Codific started its journey with OWASP[…]

Read Article