Re: [OPEN-ILS-DEV] Security inspection

2012-10-22 Thread Lazar, Alexey Vladimirovich
Well, could the OWASP Top 10 be of some use: https://www.owasp.org/index.php/Top_10_2010-Main? OWASP mainly focuses on web applications. Similarly, http://www.sans.org/top25-software-errors/. On Oct 22, 2012, at 10:11 , Kivilahti Olli-Antti wrote: > Another issue is with the security review we

[OPEN-ILS-DEV] Security inspection

2012-10-22 Thread Kivilahti Olli-Antti
Another issue is with the security review we already have funding for. As I don't have lots of knowledge about what areas of Evergreen should be taken a look into (external interfaces), would the community in general be interested in helping me direct the efforts of our 3rd party security exper