Practical Tips

• Top 10 most critical web application security risks for 2021
• Cheat Sheets
• .NET Security: .NET Security Cheat Sheet
• Application Security FAQ
• Mobile Top 10
• Testing Guide - Download

Tools

• Testing Tools
• Vulnerability Scanning Tools
• Source Code Analysis Tools
• OWASP ZAP

Concepts

• 10 Security By Design Principles
• OWASP Secure Coding Practices Quick Reference Guide
• Application Security Verification Standard Project - 2020 Checklist
• Sofware Assurance Maturity Model 2.0
• Application Security Guide for CISOs (2013)
• Application Security Program - 5-day Quick Start Guide

Conferences and Training

Chapters (including Denver and Boulder)

• Rocky Mountain Information Security Conference

• CyberSecurity Initiative: Center for Secure Design: Avoiding the top 10 software security design flaws

• 2021 CWE Top 25 Most Dangerous Software Weaknesses

• Securing Web Application Technologies (SWAT) checklist
• Posters and Cheat Sheets
• Courses
• Blog

• Course

• SSL Test

• Burp Suite
• Training

• Basic Security Practices for Web Applications
• ASP.NET Web Application Security
• Security Development Lifecycle

• Software Security Introduction (PowerPoint)

• Fundamental Practices for Secure Software Development

• The Software Security Framework

• Security testing
• List of tools for static code analysis
• Dynamic application security testing

• Web Application Security Books

• Web Application Security Books