Security Patterns

From Guidance Share

Revision as of 18:09, 21 June 2008; JD (Talk | contribs)
(diff) ←Older revision | Current revision | Newer revision→ (diff)
Jump to: navigation, search

image:InspectionCenter.gif

A security inspection is a focused check against criteria. In practice, there are three types of inspections: design, code, and deployment inspections. Design inspections help identify key engineering issues that have cascading impact. Code inspections catch implementation issues. Deployment inspections catch runtime and configuration issues. During inspections, you check both whether good practices are implemented, and bad practices are avoided.


Getting Started

Attack Patterns – Vulnerability Patterns – Security Design Patterns  – Security Implementation Patterns 

Techniques


Design Inspection Questions


Code Inspection Questions





Personal tools