Dinis Cruz

as seen at https://twitter.com/DinisCruz/status/707321909881524229  with code at https://t.co/PGtVZmR8Xt references: - http://blogs.msdn.com/b/sfaust/archive/2008/09/02/which-asp-net-controls-automatically-encodes.aspx - http://blogs.msdn.com/cfs-file.ashx/__key/communityserver-components-postattachments/00-08-91-89-96/asp.net_5F00_control_5F00_encoding.htm - http://blog.diniscruz.com/2012/10/reaching-out-to-microsft-regarding.html - http://blog.diniscruz.com/p/real-time-vulnerability-feedback-in.html

http://blog.diniscruz.com/2016/03/simple-threat-model-template-good-place.html

http://blog.diniscruz.com/2015/01/does-your-team-has-security-champion-if.html http://blog.diniscruz.com/2015/10/what-are-security-champions-and-what-do.html Two requirements/qualifications to be an SC (Security Champion): - Have a heart beat - Work for the company Ideal candidates are developers with passion for security (but not...

http://blog.diniscruz.com/2016/03/updated-jira-risk-workflow-now-with.html http://blog.diniscruz.com/2015/12/jira-workflows-for-handing-appsec-risks.html http://blog.diniscruz.com/2016/03/jira-risk-workflow-handling-of-risk.html

expand 'on how threat model can be used to map an app's architecuture'

1

In reply to ... tweet

As an alternative name for 'Security Champions' https://github.com/DinisCruz/Book_Software_Quality/blob/master/content/4.SecDevOps/8.Security-Champions.md Some companies I'm working with prefer that name since it represents an Advocates for security

"LiveReload can be quite dangerous since it is an ephemeral test, it's not repeatable and cannot be executed on CI" https://twitter.com/DinisCruz/status/739744681203015680 

Part of https://github.com/DinisCruz/Book_Software_Quality/blob/master/content/5.New-Paradigm-for-AppSec/2.Twelve-Proposed%20Actions.md  This is related to the Software labels idea: - https://www.owasp.org/index.php/OWASP_Security_Labeling_System_Project - https://www.owasp.org/images/1/17/2010-11_OWASP_Software_Labels.pptx - http://blog.diniscruz.com/2012/12/software-labels-jeffs-owasp-appsecdc.html - http://blog.diniscruz.com/2009/12/idea-for-owasp-standard-for-public.html 

This is the JIRA project that holds all security issues Related to #65

 from https://twitter.com/DinisCruz/status/739480482564341761