You can't secure what you don't acknowledge.SM

Wednesday, July 21, 2010

Good Web application security resource

In typical monster corporation style, Hewlett-Packard's Web site is painfully difficult to browse around, much less find what you're looking for when it comes to, well, pretty much anything. There is an exception however that benefits all of us in information security. It's HP's Application Security Center Resource Library. It's chock full of goodies from HP (and former SPI Dynamics) engineers, developers, and Web security evangelists.

In addition to more recent material, there are links to several whitepapers and articles I authored/ghost-authored for SPI Dynamics a few years back on regulatory compliance and performing Web vulnerability assessments (under the Technical Approaches and Legal and Regulatory Compliance headings). You may also want to check out their blogs under the HP Security Labs heading. Again, yucky user experience but great information if you can find your way through the thicket.

All in all a good resource for Web security if you're looking to brush up on the subject.

1 comment:

  1. No surprise HP's Webpage is a struggle to navigate through, as they continue to bloat, buy and acquire they seem hell-bent on becoming less and less inclined to serve the customer. Glad to hear the security end is a deviation from their common disconnect with users and buyers.