update lists
This commit is contained in:
@@ -91,8 +91,8 @@ Software: Obfuscation, Watermarking, and Tamperproofing for Software
|
||||
Protection</a> (2009) <img src="img/nonfree.png" alt="nonfree" /></li>
|
||||
<li><a href="#secure-programming-howto-2015">Secure Programming
|
||||
HOWTO</a> (2015)</li>
|
||||
<li><a href="#security-engineering-second-edition-2008">Security
|
||||
Engineering - Second Edition</a> (2008)</li>
|
||||
<li><a href="#security-engineering-third-edition-2020">Security
|
||||
Engineering - Third Edition</a> (2020)</li>
|
||||
<li><a href="#-bulletproof-ssl-and-tls-2014">Bulletproof SSL and TLS</a>
|
||||
(2014) <img src="img/nonfree.png" alt="nonfree" /></li>
|
||||
<li><a
|
||||
@@ -125,6 +125,7 @@ Challenges</a></li>
|
||||
<li><a href="#owasp-nodegoat">OWASP NodeGoat</a></li>
|
||||
<li><a href="#securing-the-stack">Securing The Stack</a></li>
|
||||
<li><a href="#owasp-serverlessgoat">OWASP ServerlessGoat</a></li>
|
||||
<li><a href="#secdim">SecDim</a></li>
|
||||
<li><a href="#blogs">Blogs</a>
|
||||
<ul>
|
||||
<li><a href="#crypto-fails">Crypto Fails</a></li>
|
||||
@@ -167,9 +168,9 @@ Android Secure Coding Standard</a> (2015)</li>
|
||||
<li><a href="#sei-cert-c-coding-standard-2006">SEI CERT C Coding
|
||||
Standard</a> (2006)</li>
|
||||
<li><a
|
||||
href="#defensive-coding-a-guide-to-improving-software-security-by-the-fedora-security-team-2022">Defensive
|
||||
href="#defensive-coding-a-guide-to-improving-software-security-by-the-fedora-security-team-2025">Defensive
|
||||
Coding: A Guide to Improving Software Security by the Fedora Security
|
||||
Team</a> (2022)</li>
|
||||
Team</a> (2025)</li>
|
||||
</ul></li>
|
||||
</ul></li>
|
||||
<li><a href="#c-1">C++</a>
|
||||
@@ -484,10 +485,10 @@ Protection</a> (2009)</h3>
|
||||
href="http://www.dwheeler.com/secure-programs/">Secure Programming
|
||||
HOWTO</a> (2015)</h3>
|
||||
<p><strong>Released</strong>: March 1, 2015</p>
|
||||
<h3 id="security-engineering---second-edition-2008"><a
|
||||
<h3 id="security-engineering---third-edition-2020"><a
|
||||
href="https://www.cl.cam.ac.uk/~rja14/book.html">Security Engineering -
|
||||
Second Edition</a> (2008)</h3>
|
||||
<p><strong>Released</strong>: April 14, 2008</p>
|
||||
Third Edition</a> (2020)</h3>
|
||||
<p><strong>Released</strong>: November 1, 2020</p>
|
||||
<h3 id="nonfree-bulletproof-ssl-and-tls-2014"><img src="img/nonfree.png"
|
||||
alt="nonfree" /> <a
|
||||
href="https://www.feistyduck.com/books/bulletproof-ssl-and-tls/">Bulletproof
|
||||
@@ -588,6 +589,12 @@ href="https://www.puresec.io/">PureSec</a>. You can install WebGoat,
|
||||
learn about the vulnerabilities, how to exploit them, and how to
|
||||
remediate each issue. The project also includes documentation explaining
|
||||
the issues and how they should be remediated with best-practices.</p>
|
||||
<h3 id="secdim"><a href="https://secdim.com">SecDim</a></h3>
|
||||
<p>SecDim is an appsec edutainment platform, <a
|
||||
href="https://learn.secdim.com">Learn</a> appsec with free git based
|
||||
labs. Think you got what it takes to build a secure app? <a
|
||||
href="https://play.secdim.com">Challenge yourself</a> with appsec games!
|
||||
Fix bugs, get a score and your name on the leaderboards.</p>
|
||||
<h3 id="blogs">Blogs</h3>
|
||||
<h4 id="crypto-fails"><a href="http://cryptofails.com">Crypto
|
||||
Fails</a></h4>
|
||||
@@ -654,11 +661,11 @@ CERT C Coding Standard</a> (2006)</h3>
|
||||
<p>A community-maintained Wiki detailing secure coding standards for C
|
||||
programming.</p>
|
||||
<h3
|
||||
id="defensive-coding-a-guide-to-improving-software-security-by-the-fedora-security-team-2022"><a
|
||||
id="defensive-coding-a-guide-to-improving-software-security-by-the-fedora-security-team-2025"><a
|
||||
href="https://docs.fedoraproject.org/en-US/Fedora_Security_Team/1/html/Defensive_Coding/index.html">Defensive
|
||||
Coding: A Guide to Improving Software Security by the Fedora Security
|
||||
Team</a> (2022)</h3>
|
||||
<p><strong>Released</strong>: May 23, 2022</p>
|
||||
Team</a> (2025)</h3>
|
||||
<p><strong>Released</strong>: February 22, 2025</p>
|
||||
<p>Provides guidelines for improving software security through secure
|
||||
coding. Covers common programming languages and libraries, and focuses
|
||||
on concrete recommendations.</p>
|
||||
@@ -888,7 +895,7 @@ Perl programming.</p>
|
||||
<h1 id="python">Python</h1>
|
||||
<h2 id="books-and-ebooks-8">Books and ebooks</h2>
|
||||
<h3 id="python-chapter-of-fedora-defensive-coding-guide"><a
|
||||
href="https://docs.fedoraproject.org/en-US/Fedora_Security_Team/1/html/Defensive_Coding/chap-Defensive_Coding-Python.html">Python
|
||||
href="https://docs.fedoraproject.org/en-US/defensive-coding/programming-languages/Python/">Python
|
||||
chapter of Fedora Defensive Coding Guide</a></h3>
|
||||
<p>Lists standard library features that should be avoided, and
|
||||
references sections of other chapters that are Python-specific.</p>
|
||||
@@ -920,3 +927,5 @@ Ruby Development Guide</a> (2014)</h3>
|
||||
<p>A guide to secure Ruby development by the Fedora Security Team. Also
|
||||
available on <a
|
||||
href="https://github.com/jrusnack/secure-ruby-development-guide">Github</a>.</p>
|
||||
<p><a href="https://github.com/paragonie/awesome-appsec">appsec.md
|
||||
Github</a></p>
|
||||
|
||||
Reference in New Issue
Block a user