full-disclosure - C&S Smart Security Score Card

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 27 May 2010 00:20:37 +0530
From: "Debasis Mohanty" <dm.mailinglists@...il.com>
To: <full-disclosure@...ts.grok.org.uk>
Subject: C&S Smart Security Score Card

A bit late post...

There are several instances where application stakeholders struggle hard to
identify necessary security SDLC activities for their applications and
products. Apparently cost has always been a key deciding factor while
engaging security activities at various stages of SDLC. Hence, most
stakeholders with budget constraints tends to engage security activity that
comes cheap and falls within the limited budget essentially to satisfy
internal compliance needs. 

C&S Smart score card intends to help application (or product) stake holders
to self determine whether a specific application requires security
assessment or not. Additionally it also helps assign weightage for
individual security activities necessary for the application which in turns
helps application stakeholders priorities those activities keeping the cost
factor in mind. 

Download here: 

C&S Smart Security Score Card

http://www.coffeeandsecurity.com/resources.aspx

-d

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/