OWASP

26

Sep

A comparison of NIST CSF 2.0 and OWASP SAMM

• Aram Hovsepyan
• NIST SSDF, OWASP, Security

NIST has finalized the Cybersecurity Framework (CSF) 2.0. CSF 2.0 focuses on understanding, assessing, prioritising, […]

Read Article

04

May

Manage your security posture with SAMMY.

• Dag Flachet
• Application Security, OWASP, Security

If you are building software the best way to manage your security posture is with[...]

Read Article

26

Apr

OWASP SAMM: Policy and Compliance

• Nicolas Montauban
• OWASP, Security

OWASP is the Open Worldwide Application Security Project. It is a non-profit foundation that works[…]

Read Article

23

Mar

Enhancing SSDLC with OWASP SAMM: A Comprehensive Guide

• Nicolas Montauban
• Application Security, OWASP, Security

In the dynamic digital realm, security is not a luxury; it’s an imperative. As software[…]

Read Article

14

Jan

How to Pick the Security Tools for your DevSecOps

• Aram Hovsepyan
• Application Security, SAMM, Secure Software Development, Security, Software security

Introduction to the security tool frenzy “Invest in Outcomes, not Tools and Capabilities” – Paul[…]

Read Article

29

Dec

How to integrate OWASP ZAP in Gitlab CI/CD pipeline.

• Viki Grozdeva
• SAMM, Secure Software Development, Security, Software security

In this article you will learn how to automate your secure deployment by integrating OWASP[...]

Read Article

05

Sep

Security verification and stress testing with JMeter

• Alex Ashkov
• Secure Software Development, Security Software Engineer, Software security

Security verification is about validating that a system or application adheres to predefined security requirements[…]

Read Article

09

Jun

OWASP SAMM: Education and Guidance

• Aram Hovsepyan
• OWASP, Secure Software Development, Security Software Engineer, Software security

Ever heard the saying “our team is our greatest asset”. I’d dare to say that[…]

Read Article

24

May

OWASP SAMM: Secure Architecture

• Aram Hovsepyan
• SAMM, Secure Software Development, Security Software Engineer

Secure architecture in a nutshell The secure architecture practice focuses on security during the architectural[…]

Read Article

26

Apr

OWASP SAMM: Pragmatic Threat Modeling Best Practices

• Aram Hovsepyan
• Privacy by Design, SAMM, Secure Software Development, Security Software Engineer

Threat modeling yields the highest return on investment when it comes to your Application Security[…]

Read Article

11

Apr

OWASP SAMM: Secure Build

• Aram Hovsepyan
• Privacy by Design, Secure Software Development, Security Software Engineer

The secure deployment of your software is a central piece in your secure software development[…]

Read Article

24

Jan

BSIMM vs SAMM: Which model is better?

• Aram Hovsepyan
• BSIMM, SAMM, Secure Software Development, Security, Software security

Cybersecurity is currently a “hype.” It was a “hype” in 2001 and has remained so[...]

Read Article