Secure Development Resources
SecurityNinja

The SecurityNinja website and blog is provided by Realex Payments. The main contributor to the site is David Rook, a Security Analyst at Realex Payments in Dublin. The website and blog provide information, news and guidance in the area of secure web application development. The website has a section devoted to Secure Development that outlines eight Secure Development Principles that deal with all of the vulnerabilites highlighted in the various industry "Top X" lists. The Secure Development Principles Whitepaper can be downloaded on the site.

 

OWASP Ireland Chapter

The OWASP Ireland Chapter meet regularly in Dublin. The chapter meetings are free and open to anyone interested in learning more about application security. Meetings typically involve presentations, hand-on training and discussion of topics relating to web application security. You can find out when the next meeting is by signing up for the OWASP Ireland mailing list. OWASP are holding an event in Ireland on September 10, 2009 in Trinity College Dublin. There is a selection of local and international speakers presenting at the event. OWASP are also running a training event on the day prior to the event.

 

OWASP Top 10

The Open Web Application Security Project (OWASP) produce a top 10 document that lists the top 10 most critical web application security flaws. The document was last updated in 2007 but it is still quite relevant. All of the threats highlighted in the document still exist although their ranking may have changed since 2007. You can download a PDF of the guide from the OWASP web site.

 

OWASP Development Guide

The OWASP Development Guide is a manual for designing, developing and deploying secure web applications. The Development Guide is aimed at architects, developers and consultants. It is referenced by many leading government, financial and corporate standards. If you are developing web sites or web applications then this guide is a great starting point. You can download a PDF of the guide here.