Adapting Penetration Testing for Software Development Purposes

[ken at krvw.com (Kenneth Van Wyk)]

Greetings SC-L folk,

FYI, there's been a wave of new content added to the DHS-funded  
software security portal, Build Security In (home URL is http:// 
BuildSecurityIn.us-cert.gov).  Most recently, a couple of articles  
about penetration testing and tools were added (see
https://buildsecurityin.us-cert.gov/daisy/bsi/articles/best-practices/ 
penetration/655.html?branch=1&language=1).

(Full disclosure: I'm the author of the pen testing articles, but  
don't let that stop you from grabbing them.  ;-)

All of the articles on the BSI portal are free.

Cheers,

Ken
-----
Kenneth R. van Wyk
SC-L Moderator
KRvW Associates, LLC
http://www.KRvW.com




-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://krvw.com/pipermail/sc-l/attachments/20070122/62054803/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url : http://krvw.com/pipermail/sc-l/attachments/20070122/62054803/attachment.bin