SDL

SDL

1. Secure Development

   • Secure Coding Checklist
     • OWASP Secure Coding
   • Source Code Review tool

2. Security Requrirements

   • Security Requirement Gathering Document

3. Secure Design

   • Threat Modelling
     • Attack Repository
     • Drawing DFD
     • Enumerating Threats
       • STRIDE
     • Analysis of Threats
       • DREAD
     • Threat Mitigation Plan
       • Accept/Transfer/Mitigate
   • Documents
     • Attack Repository
     • Threat Modelling Template

4. Security Testing

   • OWASP Testing Checklist
   • Vulnerability Scanning Tool

5. Deployment

   • Deployment Checklist

6. Trainings

   • testers
   • Designers
     • OWASP TOP 10
   • Developers
   • Deployers
   • Process Team