主页 / 0con&0ctf 2016 / 软件企业的安全之道
-
标题
-
作者王文君
-
简介
越来越多的软件企业已经意识到安全的重要性，但由于缺乏安全方面的知识和资源，软件安全的落地仍困难重重。本议题从一些容易实现的安全措施的入手，讲解如何在一个软件企业中实施一个安全项目来提高软件的安全质量。
- Vulnerabilities
- Adhoc solution
- Cost to fix these issues
- RnD’s voice to security
- RnD’s impression to security guys
- RnD’s expectation to security guys
- Security guys’ challenge
-
Security as a quick start
-
- Create security bug type
-
- Security user story
-
- Security dashboard
-
-
So evolve
- Security awareness training
- Security release criteria
- Threat modeling and security design review
- Security assessment
- Risk response
- Apply what you learnt today
- To be continued
-
援引http://0con.0ops.net/index.php/session/soft/
-
提示本站仅做资料的整理和索引,转载引用请注明出处
相关推荐
-
2021-01-21 10:26:54.115373 -
2017-01-19 14:32:08 -
2021-01-22 07:44:13.646772 -
2016-07-31 15:59:10
附件下载
-
0CON.2016.王文君.软件企业的安全之道.pdf