Fwd: [Owasp-washington] Request for Comment - Draft US Department of Justice Secure Coding Guidance

[Jeffrey Walton <noloader () gmail com>]

> From the folks at the OWASP mailing list. (I know a lot of high
caliber folks on this list might be interested).

---------- Forwarded message ----------
From: Rex Booth <rex.booth () owasp org>
Date: Tue, Apr 5, 2011 at 11:10 AM
Subject: [Owasp-washington] Request for Comment - Draft US Department
of Justice Secure Coding Guidance
To: owasp-leaders () lists owasp org, owasp-washington () lists owasp org


All,

Attached for your review and comment is a new Draft Guidance document
for the US Department of Justice addressing Secure Coding.  The
document covers areas such as input validation, authentication, and
parameter manipulation.  The intent of the document, once finalized,
is to provide the Department with a set of secure coding best
practices for commonly used programming languages.

This is a great opportunity for OWASP to increase our name recognition
and assist in the development of guidance within the US Federal
Sector.

Please use the attached comment matrix to record your comments and
suggestions.  Please submit your completed matrices to me
(rex.booth () owasp org).  The comment period will be open until 5pm EST
on April 12, 2011 (sorry for the quick turn-around).  Comments and
suggestions will be compiled by me and will be submitted to DOJ.

Let me know if you have any questions.

Thank you,
Rex

_______________________________________________
Owasp-washington mailing list
Owasp-washington () lists owasp org
https://lists.owasp.org/mailman/listinfo/owasp-washington

Attachment: blank_commentmatrix.doc
Description:

Attachment: SecureCoding_DOJ_Draft-20101223.docx
Description:

_______________________________________________
Secure Coding mailing list (SC-L) SC-L () securecoding org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
Follow KRvW Associates on Twitter at: http://twitter.com/KRvW_Associates
_______________________________________________