RE: Application Security

["Milind Nanal" <Milind.Nanal () eclerx com>]

Reference on the subject. Members view on these points how they are managing similar  
Requirement. Information on tools etc.

Regards,
 
Milind Nanal

-----Original Message-----
From: Yiannis Koukouras [mailto:ikoukouras () gmail com] 
Sent: Wednesday, January 11, 2012 6:33 PM
To: Milind Nanal
Cc: security-basics () securityfocus com; webappsec () securityfocus com; pen-test () securityfocus com
Subject: Re: Application Security

Hi,

Not sure what you are actually looking for...

Are you looking for references on those subjects or are you looking to
recruit people to perform this tasks?

BR,
Ioannis (Yiannis) Koukouras
CISSP, CISA, CISM, OSCP
MSc in Computer Systems Security
BEng in Electronic Engineering
http://www.linkedin.com/in/ikoukouras


On Wed, Jan 4, 2012 at 8:59 AM, Milind Nanal <Milind.Nanal () eclerx com> wrote:
> Hi Mailing list,
>
> Seeking help below scenario  :
>
> 1) The organization software development life cycle where in application security needs to be plugged in as focused 
> approach.
> 2) Deployment & planning on roles & responsibilities of dedicated 4-5 members as apps tester & an apps test manager 
> from info sec apps testing.
> 3) Plan for training developers, quality staff & apps testing team on various info sec aspect of application security.
> 4) Decision on open source , commercial tool to be used as apps VA Pen testing.
>
>
> Regards,
>
> Milind Nanal
>
>
> ___________________________________________________________________________________________________________________
>
> DISCLAIMER
> This message including attachment(s) is intended only for the personal and confidential use of the recipient(s) named 
> above. This communication is for informational purposes only. Email transmission cannot be guaranteed to be secure or 
> error-free. All information is subject to change without notice. If you are not the intended recipient of this 
> message you are hereby notified that any review, dissemination, distribution or copying of this message is strictly 
> prohibited. If you are not the intended recipient, please contact: helpdesk () eclerx com
>
> eClerx - An ISO/IEC 27001:2005 Certified Organization
> ___________________________________________________________________________________________________________________
>
>
>
>
> This list is sponsored by Cenzic
> --------------------------------------
> Let Us Hack You. Before Hackers Do!
> It's Finally Here - The Cenzic Website HealthCheck. FREE.
> Request Yours Now!
> http://www.cenzic.com/2009HClaunch_Securityfocus
> --------------------------------------



This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now!
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------