This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Security Integration System"
MB netblue4 (talk | contribs) (→Without further complicating development environment) |
MB netblue4 (talk | contribs) (→Duplication of effort and inconsistent implementation) |
||
Line 57: | Line 57: | ||
<h1><b>See how developers use SCAT</b></h1> | <h1><b>See how developers use SCAT</b></h1> | ||
See below how the Secure code assurance tool integrates security into software development phases | See below how the Secure code assurance tool integrates security into software development phases | ||
+ | |||
+ | |||
+ | |||
+ | |||
+ | ==Without further complicating development environment== | ||
+ | <ul> | ||
+ | |||
+ | <li>SCAT is a simple 5 screen MVC, C# web application with a small footprint that can be deployed without further complicating development environment | ||
+ | |||
+ | <li>Integrates with Jira and runs ZAP and SonarQube in docker containers | ||
+ | |||
+ | <li>SCAT is part of three domains to consider when securing software development. <em>I've detailed the other domains in an article that will be published in the Nov/Dec issue of the ISC2 magazine, I will add a link here after publication.</em> | ||
==Sprint planning phase == | ==Sprint planning phase == |
Revision as of 08:46, 7 October 2019
What is the Secure code assurance tool (SCAT)
What is the SCAT
Process integrity and point in time in the SDLC
Without further complicating development environmentLow levels of compliance
Compliance and assurance seen as blockers
Duplication of effort and inconsistent implementation
See below how the Secure code assurance tool integrates security into software development phases
Without further complicating development environment
When developing secure software we need to consider both standard secure code and client specific architectural requirements Standard secure code requirements
Client specific architectural requirements
LicensingThis program is free software: you can redistribute it and/or modify it under the terms of the link GNU Affero General Public License 3.0 as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. Project Resources[Installation Package] [Source Code] Project LeaderClassifications |