Security Tools and Resources for Application Developers

Security Training

• AzIT Courses

UA Presentations

• Web Application Security - Presentation by Ed Murphy, UITS, OSCR at AzFUSE

OWASP

• Open Web Application Security Project
• Guide to Building Secure Web Applications
• Web Application Testing (pdf)
• Web Application Penetration Test Checklist (pdf)
• Application Security Testing Procedures and Checklists

SANS

• Web Application Auditing Over Lunch - Johannes B. Ullrich
• SANS Top 20 Internet Security Attack Targets
• Application/Database Security
• Web Application Security Assessments

MSDN Library

• Resource for developers using Microsoft tools, products, and technologies - Information found here will help developers and administrators design and deploy secure .NET Framework applications.
• Improving Web Application Security: Threats and Countermeasures - Guide for designing, building, and configuring secure ASP.NET Web applications

Other Resources

• Web Application Best Practices – UA Confluence
• Secure Coding - CERT
• Application Security Configuration Guides – National Security Agency
• List of common security concerns for web applications, with a focus on PHP solutions