Security Reading

All quiet round here at the moment, as my brain is utterly failing to process stuff.

I’m stuck with reading a metric butt-load of security stuff (as written about at the tail end of last week) which is about as interesting as you’d expect.

Check out this – it’s the first paragraph of the documentation, which (as I understand it) is meant to make you want to read more…

CLASP — Comprehensive, Lightweight Application Security Process — is an activity-driven, role-based set of process components whose core contains formalized best practices for building security into your existing or new-start software development lifecycles in a structured, repeatable, and measurable way.

In any game of Buzzword Bingo, that paragraph/sentence will get you “House!”

There’s 600+ pages of this shit to wade through, so posts here might be a bit slow