Codific
  • Solutions
    • AppSec Management with SAMMY
    • PRC Management with SAMMY
    • Threat Modeling with SAMMY
    • SAMMY Versions
    • Ed-Tech and HR-Tech
      • Secure Video Sharing with Videolab
      • Student Attendance Tracking with Attendance Radar
      • Survey Analysis Automation with SARA
  • Services
    • Consultancy Services
    • OWASP SAMM Assessments
    • Threat Modeling
    • OWASP SAMM Training
    • OWASP SAMM Guidance
  • Customers
    • Zebra Technologies
    • Sigma Software Group
    • Sign In Solutions
    • Kiloverse
    • Approach Cyber
    • All Customer Stories
  • Company
    • Our Story
    • Who We Are
    • Codific @ OWASP
    • Careers
  • Partners
    • Implementation Partners Program
      • Partner Success Story
    • Academic Application Security Program
  • Insights
    • Blog
    • The AppSec Management Podcast
    • Application Security Science
    • Press Coverage
  • Contact
  • Go to SAMMY

Author Archives: Aram Hovsepyan

Home Aram Hovsepyan Page 3
Security requirements

28

Feb

Security Requirements Driven Development: the best ROI for your SDLC

  • Aram Hovsepyan
  • Application Security, SAMM, SDLC, Secure Software Development, Software security, SSDLC

Application security requires a systematic approach and requires dealing with software security throughout every stage […]

Read Article
NIST CSF vs OWASP SAMM

26

Sep

A comparison of NIST CSF 2.0 and OWASP SAMM

  • Aram Hovsepyan
  • NIST SSDF, OWASP, Security

NIST has finalized the Cybersecurity Framework (CSF) 2.0. CSF 2.0 focuses on understanding, assessing, prioritising,[…]

Read Article
the cost of introducing application security, the cost of security at a scale up

28

Mar

The cost of introducing application security at a scale-up

  • Aram Hovsepyan
  • Application Security, Security

Software security is now a number one risk worldwide. It is literally on the US[…]

Read Article
SAMMY scores overview

09

Jun

OWASP SAMM: Education and Guidance

  • Aram Hovsepyan
  • OWASP, Secure Software Development, Security Software Engineer, Software security

Ever heard the saying “our team is our greatest asset”. I’d dare to say that[…]

Read Article
SAMM Secure Architecture

24

May

OWASP SAMM: Secure Architecture

  • Aram Hovsepyan
  • SAMM, Secure Software Development, Security Software Engineer

Secure architecture in a nutshell In application security, architecture is of paramount importance. The secure[…]

Read Article
how to do threat modeling steps

26

Apr

OWASP SAMM: Pragmatic Threat Modeling Best Practices

  • Aram Hovsepyan
  • Privacy by Design, SAMM, Secure Software Development, Security Software Engineer

Threat modeling yields the highest return on investment when it comes to your Application Security[…]

Read Article
SAMM: your map and itinerary in the security journey.

24

Jan

BSIMM vs SAMM: Which model is better?

  • Aram Hovsepyan
  • BSIMM, SAMM, Secure Software Development, Security, Software security
Application security has been a hot topic for decades. It was a buzzword in 2001,[...]
Read Article
Previous

Building a simple and safe digital future

This website runs on green hosting - verified by thegreenwebfoundation.org
  • Visit Codific's LinkedIn channel (opens in a new tab)
  • Visit Codific's YouTube channel (opens in a new tab)
  • Spotify

Main Focus

Application Security Compliance Cybersecurity NIST SSDF OWASP OWASP SAMM Privacy by Design SAMM Secure Software Development Security Software security SSDLC

Recent Post

  • PHP2Shell timeline

    October 26, 2026

    Emergency patching in the age of AI: best practices

    October 26, 2026

  • Asset inventory

    October 26, 2026

    How Codific handled php2shell

    October 26, 2026

  • human-led vs ai-driven threat modeling

    October 22, 2026

    Human-Led vs AI-Driven Threat Modeling: A Controlled Experiment

    October 22, 2026

In the Spotlight

  • SAMMY
  • The AppSec Management Podcast
  • Secure Video Sharing with Videolab
  • Attendance Radar
  • SARA
  • Terms & Conditions
  • Imprint
  • Cookie Policy
  • Privacy Statement

Codific • Building a simple and safe digital future 2026. All rights reserved.

Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}