I just read the Q&A with Gary McGraw on building security into the development process -- http://searchappsecurity.techtarget.com/qna/0,289202,sid92_gci1187360,00.html -- and he said architectural risk analysis is one thing everyone should be doing to make sure you're developing secure apps. I downloaded the excerpt from his book that's on the subject, but I was wondering if anyone knew of any other resources on the subject. Are any of you doing architectural risk analysis?
May 10, 2006 3:27 PM
May 17, 2006 12:26 PM