The Open Web application security project, or
OAS, an organization focused on improving the security of software.
Their mission is to make software security
visible so that individuals and organizations can make informed decisions.
Oas has been around for years.
Oas puts out top 10 lists of application
security threats, and mobile security threats, and IoT security threats.
Great resource.
Lots and lots of information on various types of application attacks.
They also put out some tools like OAS ZAP, which you are going to play with a little
bit in the lab, and Durabuster and a few others.
Software security, software assurance maturity model.
We've talked about maturity models.
We know that maturity models deal with the
process, governance, construction, verification, and deployment,
and the various stages of the development process.
We're not going to pick this one apart too much here.
We've definitely got a feel for maturity models.
The main objective of building security
and maturity model is to enable the organization to analyze
and implement security features it requires by evaluating those frequently
implemented security features in other companies.
Again, that goes into software development frameworks.
Again, this is a framework for best practices.
Well, twelve practices organized in four demands.