Security - Revision history

Jimg: /* Working Documents */

2012-08-08T21:28:51Z

Working Documents

← Older revision		Revision as of 21:28, 8 August 2012
Line 16:		Line 16:

	# [[Strawman Security Policies]]		# [[Strawman Security Policies]]
	# [http://scm.opendap.org~~:8090~~/trac/wiki/NetworkServerSecurity OPeNDAP Security Policy and Procedures]		# [http://scm.opendap.org/trac/wiki/NetworkServerSecurity OPeNDAP Security Policy and Procedures]

	=== Members ===		=== Members ===

PatrickWest at 21:42, 12 May 2009

2009-05-12T21:42:02Z

← Older revision		Revision as of 21:42, 12 May 2009
Line 36:		Line 36:
	* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]		* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]
	* Here's a paper on [http://www.dwheeler.com/oss_fs_why.html Free and/or Open Source Software] that has some interesting references.		* Here's a paper on [http://www.dwheeler.com/oss_fs_why.html Free and/or Open Source Software] that has some interesting references.

			[[Category:Working Groups\|Security]]

RobDeAlmeida at 01:12, 24 October 2007

2007-10-24T01:12:14Z

← Older revision		Revision as of 01:12, 24 October 2007
Line 23:		Line 23:
	# [mailto:Christopher.S.Lynnes@nasa.gov Chris Lynnes]		# [mailto:Christopher.S.Lynnes@nasa.gov Chris Lynnes]
	# [mailto:caron@unidata.ucar.edu John Caron]		# [mailto:caron@unidata.ucar.edu John Caron]
			# [mailto:rob@pydap.org Rob De Almeida]

	=== Resources ===		=== Resources ===

Jimg: /* Authentication Working Group */

2007-08-06T16:35:32Z

Authentication Working Group

← Older revision		Revision as of 16:35, 6 August 2007
Line 1:		Line 1:
	== ~~Authentication~~ Working Group ==		== Security Working Group ==
	=== Motivation ===		=== Motivation ===

Jimg: /* Resources */

2007-05-23T00:19:37Z

Resources

← Older revision		Revision as of 00:19, 23 May 2007
Line 30:		Line 30:
	* [http://www.owasp.org/index.php/Main_Page OWASP] The Open Web Application Security Project has produced a [http://www.owasp.org/index.php/OWASP_Guide_Project Guide] [http://prdownloads.sourceforge.net/owasp/OWASPGuide2.0.1.pdf?download (pdf)] which is widely used as an introduction to security issues.		* [http://www.owasp.org/index.php/Main_Page OWASP] The Open Web Application Security Project has produced a [http://www.owasp.org/index.php/OWASP_Guide_Project Guide] [http://prdownloads.sourceforge.net/owasp/OWASPGuide2.0.1.pdf?download (pdf)] which is widely used as an introduction to security issues.
	* [http://www.cert.org/ cert.org] This is a good site for information about code standards for C and C++ (there's nothing here for Java I could find).		* [http://www.cert.org/ cert.org] This is a good site for information about code standards for C and C++ (there's nothing here for Java I could find).
			* [http://www.cisecurity.org/ The Center for Internet Security]
	* [http://17799.denialinfo.com/whatisiso17799.htm ISO 17799] ISO 17799 (and its sister standard, whose number escapes me) are the 'big daddies' of security policies. They are certainly overkill for us, but [http://17799.denialinfo.com/chapter8.htm chapter 8] and [http://17799.denialinfo.com/chapter13.htm chapter 13] address software development and might have some interesting ideas. It would be a good idea to not contradict this standard, at the least.		* [http://17799.denialinfo.com/whatisiso17799.htm ISO 17799] ISO 17799 (and its sister standard, whose number escapes me) are the 'big daddies' of security policies. They are certainly overkill for us, but [http://17799.denialinfo.com/chapter8.htm chapter 8] and [http://17799.denialinfo.com/chapter13.htm chapter 13] address software development and might have some interesting ideas. It would be a good idea to not contradict this standard, at the least.
	* [http://www.sans.org/resources/policies/ SANS] SANS seems like one of the best resources out there. I found this on my own and Jeff Ogata also recommended it. This is their section on policies, but they offer much more.		* [http://www.sans.org/resources/policies/ SANS] SANS seems like one of the best resources out there. I found this on my own and Jeff Ogata also recommended it. This is their section on policies, but they offer much more.
	* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]		* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]
	* Here's a paper on [http://www.dwheeler.com/oss_fs_why.html Free and/or Open Source Software] that has some interesting references.		* Here's a paper on [http://www.dwheeler.com/oss_fs_why.html Free and/or Open Source Software] that has some interesting references.

Jimg: /* Resources */

2007-05-22T18:35:33Z

Resources

← Older revision		Revision as of 18:35, 22 May 2007
Line 28:		Line 28:
	Most of these resources are aimed at sites running computers. We do that, but information targeted at developers of the software others run seems harder to find. See below for more comments.		Most of these resources are aimed at sites running computers. We do that, but information targeted at developers of the software others run seems harder to find. See below for more comments.

	* [http://www.~~sans~~.org/~~resources~~/~~policies~~/ ~~SANS~~] ~~SANS seems like one of the best resources out there~~. ~~I found this on my own and Jeff Ogata also recommended it~~. ~~This~~ is ~~their section on policies, but they offer much more~~.		* [http://www.owasp.org/index.php/Main_Page OWASP] The Open Web Application Security Project has produced a [http://www.owasp.org/index.php/OWASP_Guide_Project Guide] [http://prdownloads.sourceforge.net/owasp/OWASPGuide2.0.1.pdf?download (pdf)] which is widely used as an introduction to security issues.
	* [http://www.cert.org/ cert.org] This is a good site for information about code standards for C and C++ (there's nothing here for Java I could find).		* [http://www.cert.org/ cert.org] This is a good site for information about code standards for C and C++ (there's nothing here for Java I could find).
	* [http://17799.denialinfo.com/whatisiso17799.htm ISO 17799] ISO 17799 (and its sister standard, whose number escapes me) are the 'big daddies' of security policies. They are certainly overkill for us, but [http://17799.denialinfo.com/chapter8.htm chapter 8] and [http://17799.denialinfo.com/chapter13.htm chapter 13] address software development and might have some interesting ideas. It would be a good idea to not contradict this standard, at the least.		* [http://17799.denialinfo.com/whatisiso17799.htm ISO 17799] ISO 17799 (and its sister standard, whose number escapes me) are the 'big daddies' of security policies. They are certainly overkill for us, but [http://17799.denialinfo.com/chapter8.htm chapter 8] and [http://17799.denialinfo.com/chapter13.htm chapter 13] address software development and might have some interesting ideas. It would be a good idea to not contradict this standard, at the least.
			* [http://www.sans.org/resources/policies/ SANS] SANS seems like one of the best resources out there. I found this on my own and Jeff Ogata also recommended it. This is their section on policies, but they offer much more.
	* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]		* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]
	* [http://www.owasp.org/index.php/OWASP_Guide_Project OWASP] The Open Web Application Security Project has produced a [http://prdownloads.sourceforge.net/owasp/OWASPGuide2.0.1.pdf?download guide (stable version; pdf)] which is widely used to secure web applications.
	* Here's a paper on [http://www.dwheeler.com/oss_fs_why.html Free and/or Open Source Software] that has some interesting references.		* Here's a paper on [http://www.dwheeler.com/oss_fs_why.html Free and/or Open Source Software] that has some interesting references.

Jimg: /* Resources */

2007-05-19T00:26:57Z

Resources

← Older revision		Revision as of 00:26, 19 May 2007
Line 33:		Line 33:
	* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]		* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]
	* [http://www.owasp.org/index.php/OWASP_Guide_Project OWASP] The Open Web Application Security Project has produced a [http://prdownloads.sourceforge.net/owasp/OWASPGuide2.0.1.pdf?download guide (stable version; pdf)] which is widely used to secure web applications.		* [http://www.owasp.org/index.php/OWASP_Guide_Project OWASP] The Open Web Application Security Project has produced a [http://prdownloads.sourceforge.net/owasp/OWASPGuide2.0.1.pdf?download guide (stable version; pdf)] which is widely used to secure web applications.
			* Here's a paper on [http://www.dwheeler.com/oss_fs_why.html Free and/or Open Source Software] that has some interesting references.

Jimg: /* Resources */

2007-05-18T23:06:05Z

Resources

← Older revision		Revision as of 23:06, 18 May 2007
Line 32:		Line 32:
	* [http://17799.denialinfo.com/whatisiso17799.htm ISO 17799] ISO 17799 (and its sister standard, whose number escapes me) are the 'big daddies' of security policies. They are certainly overkill for us, but [http://17799.denialinfo.com/chapter8.htm chapter 8] and [http://17799.denialinfo.com/chapter13.htm chapter 13] address software development and might have some interesting ideas. It would be a good idea to not contradict this standard, at the least.		* [http://17799.denialinfo.com/whatisiso17799.htm ISO 17799] ISO 17799 (and its sister standard, whose number escapes me) are the 'big daddies' of security policies. They are certainly overkill for us, but [http://17799.denialinfo.com/chapter8.htm chapter 8] and [http://17799.denialinfo.com/chapter13.htm chapter 13] address software development and might have some interesting ideas. It would be a good idea to not contradict this standard, at the least.
	* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]		* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]
	* [http://www.owasp.org/index.php/OWASP_Guide_Project OWASP] The Open Web Application Security Project has produced a [http://prdownloads.sourceforge.net/owasp/OWASPGuide2.0.1.pdf?download guide (stable version; pdf)] which is widely used to secure web applications~~. The [http://www.owasp.org/index.php/Guide_Table_of_Contents in-development version] is available on-line, too~~.		* [http://www.owasp.org/index.php/OWASP_Guide_Project OWASP] The Open Web Application Security Project has produced a [http://prdownloads.sourceforge.net/owasp/OWASPGuide2.0.1.pdf?download guide (stable version; pdf)] which is widely used to secure web applications.

Jimg: /* Resources */

2007-05-18T23:04:31Z

Resources

← Older revision		Revision as of 23:04, 18 May 2007
Line 33:		Line 33:
	* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]		* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]
	* [http://www.owasp.org/index.php/OWASP_Guide_Project OWASP] The Open Web Application Security Project has produced a [http://prdownloads.sourceforge.net/owasp/OWASPGuide2.0.1.pdf?download guide (stable version; pdf)] which is widely used to secure web applications. The [http://www.owasp.org/index.php/Guide_Table_of_Contents in-development version] is available on-line, too.		* [http://www.owasp.org/index.php/OWASP_Guide_Project OWASP] The Open Web Application Security Project has produced a [http://prdownloads.sourceforge.net/owasp/OWASPGuide2.0.1.pdf?download guide (stable version; pdf)] which is widely used to secure web applications. The [http://www.owasp.org/index.php/Guide_Table_of_Contents in-development version] is available on-line, too.

	~~--[[User:jimg\|James Gallagher]] 11:20 3 May 2007 (MDT)~~

Jimg: /* Resources */

2007-05-18T23:04:19Z

Resources

← Older revision		Revision as of 23:04, 18 May 2007
Line 32:		Line 32:
	* [http://17799.denialinfo.com/whatisiso17799.htm ISO 17799] ISO 17799 (and its sister standard, whose number escapes me) are the 'big daddies' of security policies. They are certainly overkill for us, but [http://17799.denialinfo.com/chapter8.htm chapter 8] and [http://17799.denialinfo.com/chapter13.htm chapter 13] address software development and might have some interesting ideas. It would be a good idea to not contradict this standard, at the least.		* [http://17799.denialinfo.com/whatisiso17799.htm ISO 17799] ISO 17799 (and its sister standard, whose number escapes me) are the 'big daddies' of security policies. They are certainly overkill for us, but [http://17799.denialinfo.com/chapter8.htm chapter 8] and [http://17799.denialinfo.com/chapter13.htm chapter 13] address software development and might have some interesting ideas. It would be a good idea to not contradict this standard, at the least.
	* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]		* [http://www.information-security-policies-and-standards.com/ information-security-policies-and-standards.com]
			* [http://www.owasp.org/index.php/OWASP_Guide_Project OWASP] The Open Web Application Security Project has produced a [http://prdownloads.sourceforge.net/owasp/OWASPGuide2.0.1.pdf?download guide (stable version; pdf)] which is widely used to secure web applications. The [http://www.owasp.org/index.php/Guide_Table_of_Contents in-development version] is available on-line, too.

	--[[User:jimg\|James Gallagher]] 11:20 3 May 2007 (MDT)		--[[User:jimg\|James Gallagher]] 11:20 3 May 2007 (MDT)