Hands-On Security in DevOps

Secure architecture review

To evaluate the existing security architecture of the e-commerce site, the security team decides to work with architects to do an initial architecture review based on OWASP ASVS practices. To do the assessment, the project team can either use an online portal or EXCEL. In this case, the project security architecture review was done by using EXCEL checklist before an in-house security assessment portal was used. The following table contains some resources and documentation concerning these two tools that you may find useful:

OWASP assessment tool	Reference of resources
On-line Demo	OWASP ASVS Assessment Generator Demo site: http://ibuildingsnl.github.io/owasp-asvs-report-generator/index.html Source: ...