|
| 1 | +--- |
| 2 | + |
| 3 | +layout: col-sidebar |
| 4 | +title: OWASP Secure Coding Practices-Quick Reference Guide |
| 5 | +tags: example-tag |
| 6 | +level: 0 |
| 7 | +type: documentation |
| 8 | + |
| 9 | +--- |
| 10 | +#### Main |
| 11 | + |
| 12 | +## Welcome to the Secure Coding Practices Quick Reference Guide Project |
| 13 | + |
| 14 | +The Secure Coding Practices Quick Reference Guide is a technology |
| 15 | +agnostic set of general software security coding practices, in a |
| 16 | +comprehensive checklist format, that can be integrated into the |
| 17 | +development lifecycle. At only 17 pages long, it is easy to read and |
| 18 | +digest. |
| 19 | + |
| 20 | +The focus is on secure coding requirements, rather then on |
| 21 | +vulnerabilities and exploits. It includes an introduction to Software |
| 22 | +Security Principles and a glossary of key terms. |
| 23 | + |
| 24 | +It is designed to serve as a secure coding kick-start tool and easy |
| 25 | +reference, to help development teams quickly understand secure coding |
| 26 | +practices. |
| 27 | + |
| 28 | +### Sections of the Guide: |
| 29 | + |
| 30 | + - Table of contents |
| 31 | + - Introduction |
| 32 | + - Software Security Principles Overview |
| 33 | + - Secure Coding Practices Checklist |
| 34 | + - Links to useful resources |
| 35 | + - Glossary of important terminology |
| 36 | + |
| 37 | +**Download the current v2 (Stable) release:** |
| 38 | + |
| 39 | + - [English version |
| 40 | + PDF](/www-pdf-archive/OWASP_SCP_Quick_Reference_Guide_v2.pdf ) |
| 41 | + - [English version MS |
| 42 | + Word](Media:OWASP_SCP_Quick_Reference_Guide_v2.doc ) |
| 43 | + |
| 44 | +**Translations:** |
| 45 | + |
| 46 | + - [Brazilian Portuguese Translation |
| 47 | + PDF](/www-pdf-archive/OWASP_SCP_v1.3_pt-BR.pdf ) |
| 48 | + - [Portugal Portuguese Translation |
| 49 | + PDF](/www-pdf-archive/OWASP_SCP_v1.3_pt-PT.pdf ) |
| 50 | + - [Korean Translation |
| 51 | + PDF](/www-pdf-archive/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf ) |
| 52 | + - [Spanish Translation |
| 53 | + doc](Media:OWASP_SCP_Quick_Reference_Guide_SPA.doc ) |
| 54 | + - [Chinese Translation |
| 55 | + PDF](/www-pdf-archive/OWASP_SCP_Quick_Reference_Guide_%28Chinese%29.pdf ) |
| 56 | + |
| 57 | +**Related Presentations:** |
| 58 | +This slide deck incorporates many concepts from the Quick reference |
| 59 | +guide, but also utilizes other OWASP resources. |
| 60 | +[Web Application Development Dos and Donts - Presentation from the Royal |
| 61 | +Bank of |
| 62 | +Scotland](https://www.owasp.org/images/b/ba/Web_Application_Development_Dos_and_Donts.ppt) |
| 63 | + |
| 64 | +**Related Projects:** |
| 65 | +[Go programming language secure coding practices guide, based on the |
| 66 | +OWASP Secure Coding Practices](https://github.com/Checkmarx/Go-SCP) |
| 67 | + |
| 68 | +**Project Feedback and Disposition History** |
| 69 | + |
| 70 | +[XLS Feedback |
| 71 | +Spreadsheet](http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls) |
| 72 | + |
| 73 | +----- |
| 74 | + |
| 75 | +## Feedback and Participation: |
| 76 | + |
| 77 | +I hope you find the OWASP Secure Coding Practices Quick Reference Guide |
| 78 | +Project useful. Please contribute to the Project by sending your |
| 79 | +comments, questions, and suggestions to |
| 80 | +[keith.turpin@owasp.org](mailto:Keith.Turpin@owasp.org). |
| 81 | + |
| 82 | +Project mailing list and archives: [subscription |
| 83 | +page.](https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices) |
| 84 | + |
| 85 | +----- |
| 86 | + |
| 87 | +## Project Contributors: |
| 88 | + |
| 89 | +If you contribute to this Project, please add your name here |
| 90 | +**Project Lead:** |
| 91 | + |
| 92 | + - [Keith Turpin](user:Keith_Turpin ) |
| 93 | + |
| 94 | +**Contributors:** |
| 95 | +\* Dan Kranz |
| 96 | + |
| 97 | + - Walt Pietrowski |
| 98 | + - Catherine Spencer |
| 99 | + - [Caleb McGary](mailto:Caleb.mcgary@gmail.com) |
| 100 | + - [Brad Causey](mailto:bradcausey@owasp.org) |
| 101 | + - [Ludovic Petit](mailto:ludovic.petit@owasp.org) |
| 102 | + - [Michael V. Scovetta](mailto:michael.scovetta@gmail.com) |
| 103 | + - [Jim Manico](mailto:jim.manico@owasp.org) |
| 104 | + - Jason Coleman |
| 105 | + - [Anurag Agarwal](mailto:anurag.agarwal@yahoo.com) |
| 106 | + - [Andrew Petukhov](mailto:petand@lvk.cs.msu.su) |
| 107 | + |
| 108 | + |
| 109 | +**Translation Contributors** |
| 110 | + |
| 111 | +**Portuguese Translation** |
| 112 | +\* [Tarcizio Vieira Neto](mailto:tarciziovn@gmail.com) |
| 113 | + |
| 114 | + - [Sílvio Correia Filho](mailto:silviofilhosf@gmail.com) |
| 115 | + - [Leandro Gomes](mailto:leandrock@gmail.com) |
| 116 | + |
| 117 | +**Korean Translation** |
| 118 | +\* OWASP Korea chapter **Spanish Translation** |
| 119 | +\* Canedo,Gerardo |
| 120 | + |
| 121 | + - Flores,Mauro |
| 122 | + - [Hill,Alberto](user:Alberto_Daniel_Hill ) |
| 123 | + - Martinez,Mateo |
| 124 | + - Papaleo,Mauricio |
| 125 | + - Soarez,Nicolás |
| 126 | + - Targetta, Cecilia |
| 127 | + |
| 128 | +**Chinese Translation** |
| 129 | +\* [Jie Wang](mailto:wangj@owasp.org.cn) |
| 130 | + |
| 131 | + - Yongliang He |
| 132 | + - Henghui Lin |
| 133 | + |
| 134 | +#### Project About |
| 135 | + |
| 136 | +__NOTOC__ <headertabs /> |
| 137 | + |
| 138 | +[Secure Coding Practices - Quick Reference |
| 139 | +Guide](Category:OWASP_Project ) |
| 140 | +[Category:OWASP_Document](Category:OWASP_Document ) |
| 141 | +[Category:OWASP Best |
| 142 | +Practices](Category:OWASP_Best_Practices ) |
| 143 | +[Category:OWASP_Download](Category:OWASP_Download ) [OWASP |
| 144 | +Release Quality |
| 145 | +Document](Category:OWASP_Release_Quality_Document ) |
| 146 | +[Category:SAMM-SR-1](Category:SAMM-SR-1 ) |
0 commit comments