OWASP Developer Guide
Verification Do's and Don'ts
6.5 Verification Do’s and Don’ts
Verification is one of the business functions described by the OWASP SAMM.
Verification takes skill and knowledge, so it is important to build on the existing experience contained in these Do’s and Dont’s.
Sections:
6.5.1 Secure environment
6.5.2 System hardening
6.5.3 Open Source software
The OWASP Developer Guide is a community effort; if there is something that needs changing then submit an issue or edit on GitHub.