AppSec

11

Jun

What Is the SSDLC? A Guide to Secure Development

• Nicolas Montauban

Most security issues in software stem from one simple problem: teams try to fix them […]

Read Article

03

Jun

Master Dependency Management with SOOS and SAMM

• Aram Hovsepyan
• Application Security, Application Security Management, SAMM, SSDLC

Dependency management has become one of the most critical aspects of modern software development. Third-party[…]

Read Article

26

May

Security metrics with purpose and strategic impact

• Aram Hovsepyan
• Application Security, Cybersecurity, Security metrics

You’ve probably heard the saying, “You can’t manage what you don’t measure.” If you are[…]

Read Article

24

Apr

What to expect from EU CRA fines?

• Dag Flachet

  Official framework, regulation and standard pages mentioned in this article CRA GDPR OWASP SAMM[…]

Read Article

10

Apr

Master Threat Modeling with Toreon’s World-Class Approach

• Aram Hovsepyan
• Application Security, Application Security Management, architecture mitigation, Cybersecurity, threat modeling

Threat modeling shaped my AppSec career. It helped me wrestle with one of security’s most[…]

Read Article

04

Apr

OWASP SAMM: A Comprehensive Introduction

• Nicolas Montauban
• Application Security, Application Security Management, Cybersecurity, OWASP SAMM, Security Maturity

Modern software development moves fast, and so do the security challenges that come with it.[…]

Read Article

04

Apr

How to implement OWASP SAMM: Tooling, Example and Mistakes to Avoid

• Nicolas Montauban
• Application Security, OWASP SAMM, Secure Software Development, Software security, Team Management

Understanding OWASP SAMM is only the beginning. The real value comes from using it to[…]

Read Article

07

Dec

NIST 800-53 and NIST 800-171: Key Differences

• Aram Hovsepyan
• Compliance, Cybersecurity, NIST SSDF, Privacy by Design, Security, Software security

The U.S. cybersecurity strategy seems to be lightyears ahead of the EU. I strongly believe[…]

Read Article

29

Nov

BSIMM (Building Security In Maturity Model): A Complete Guide

• Nicolas Montauban
• Application Security, BSIMM, SAMM, Security, SSDLC

Application security is a complex discipline. To make things even harder for us, it is[…]

Read Article

28

Nov

Comparing NIST SSDF and OWASP SAMM: A Comprehensive Analysis

• Aram Hovsepyan
• Application Security, BSIMM, NIST SSDF, OWASP, SAMM

Over the past year, our SAMMY tool has grown significantly. It now supports not just[…]

Read Article

22

Nov

What is FISMA and how to comply with it

• Aram Hovsepyan
• Application Security, Compliance, Cybersecurity

What is FISMA and why is it important? The Federal Information Security Modernization Act (FISMA)[…]

Read Article

20

Nov

What is NIST CSF 2.0 and how to implement it

• Aram Hovsepyan
• Application Security, Cybersecurity, Secure Software Development

Managing cybersecurity risks requires a clear strategy combining people, processes, tools, and knowledge, all guided[…]

Read Article