0

I'm looking for a standardised set of tests or scoring measures I can apply to my web site to be able to quantify it's standard or level of security. I can do some research and compile a check-list myself, but I am hoping there is something standardised, something independent of me that my client and the users of our site will appreciate more than just something I compiled.

migrated from stackoverflow.com Feb 20 '12 at 21:30

This question came from our site for professional and enthusiast programmers.

3

It sounds like you might be looking for something like the OWASP ASVS. It defines four levels of rigor, each of which has an associated set of verification activities. Once a client has decided the level at which their application should reside, you will have a concrete list of security activities that should be performed to get to that level.

  • Very interesting looking project. Lots of reading for me. – ProfK Feb 17 '12 at 12:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy