Transcription of Secure Coding Practices - Quick Reference Guide
{{id}} {{{paragraph}}}
November 2010 Version 1 OWASP Secure Coding Practices Quick Reference Guide Copyright and License Copyright 2010 The OWASP Foundation. This document is released under the Creative Commons Attribution ShareAlike license. For any reuse or distribution, you must make clear to others the license terms of this work. November 2010 Version 2 Table of Contents Introduction .. 3 Software Security and Risk Principles Overview .. 4 Secure Coding Practices Checklist .. 5 Input Validation: .. 5 Output Encoding: .. 5 Authentication and Password Management: .. 6 Session Management:.. 7 Access Control: .. 8 Cryptographic Practices : .. 9 Error Handling and Logging: .. 9 Data Protection:..10 Communication Security: ..10 System Configuration:..11 Database Security: ..11 File Management: ..12 Memory Management.
review of security principles is beyond the scope of this guide, a quick overview is provided. The goal of software security is to maintain the confidentiality, integrity, and availability of information resources in order to enable successful business operations. This goal is accomplished through the implementation of security controls.
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document:
{{id}} {{{paragraph}}}