We will provide a short introduction to OWASP SAMM, which is a flagship OWASP project allowing organizations to bootstrap and iteratively improve their secure software practice in a measurable way. Seba will explain the SAMM model, consisting of 15 security practices. Every security practice contains a set of activities, structured into 3 maturity levels. The activities on a lower maturity level are typically easier to execute and require less formalization than the ones on a higher maturity level. A the end we will cover how you can engage with the SAMM community and provide an overview of what happened at our latest SAMM User Day which happened on May 27th.
Segment Resources:
- owaspsamm.org/
- github.com/OWASPsamm
- app.slack.com/client/T04T40NHX/C0VF1EJGH
- youtube.com/channel/UCEZDbvQrj5APg5cEET49A_g
- twitter.com/OwaspSAMM
- linkedin.com/company/18910344/admin/
Visit securityweekly.com/asw for all the latest episodes!
Show Notes: securityweekly.com/vault-asw-6
- OWASP SAMM - Software Assurance Maturity Model - Sebastian Deleersnyder - ASW Vault ( Download)
- OWASP SAMM Deep-dive sessions - Implementation | Secure Deployment ( Download)
