OWASP Developer Guide
Verification Do's and Don'ts
12.2 Verification Do’s and Don’ts
Verification is one of the business functions described by the OWASP SAMM.
Verification takes skill and experience, so it is important to build on the existing knowledge contained in these Do’s and Dont’s.
Sections:
14.2.1 Secure environment
14.2.2 System hardening
14.2.3 Open Source software
The OWASP Developer Guide is a community effort; if there is something that needs changing then submit an issue or edit on GitHub.