Tag Archives: OWASP SAMM

Agile Threat Modeling

Combining threat modeling with an agile development methodology such as Scrum is a quite challenging topic: Creating a threat model usually requires an experienced security expert and some effort to do this. But how does this work, wen a model … Continue reading

Posted in Threat Modeling | Tagged , , , , | Leave a comment

Impressions of OWASP SAMM 2 Beta

Over the last ten years, I have been working with different maturity models for software security, including OWASP SAMM of course. I haven’t used OWASP SAMM 1.x (or OpenSAMM as it was called before it became an OWASP project) have … Continue reading

Posted in Secure SDLC, Secure Software Development, Security Requirements, Threat Modeling | Tagged | Leave a comment