theowaspapplication security$codeofconduct$ …：theowaspapplication美元美元的安全行为规范….pdf

The ?OWASP ?Application ?Security ?Code ?of ?Conduct ?for ? Development ?Organizations 1 The ?OWASP ? Application ? Security Code ?of ?Conduct for ? Development ? Organiz ations (The ?OWASP ?“ Gray Book”) Version ? 8 ( 19 th Ma y ?2015 ) Release ? ?201 2 --‐ 2015 OWASP ?Foundation This ?document ?is ?released ?under ?the ?Creative ?Commons ?Attribution ? ShareAlike ? ?license . ? For ?any ?reuse ?or ?distribution, ?you ?must ?make ?clear ?to ?others ?the ?license ?terms ?of ?this ?work The ?OWASP ?Application ?Security ?Code ?of ?Conduct ?for ? Development ?Organizations 2 Introduction Software ?appli cations ?are ?at ?the ?heart ?of ?information ?systems ?and business ?processes . Organizations ?rely ? on ?these ?applications ?to ? undertake ? their ?business ?and ?process ?valuable ?data, ?yet ?the ?applications ?often ? have ?weak, ?or ?poorly ?selected, ?security ?mechanisms. ? Organizations ?that ?want ?to ? develop ?software ?must ? ensure ?that the ?users ?of ?their ?code ?are ?protected . ?Development ? organiz ations ?may ?be ?developing ?their ? own ?s oftware or producing ?software ?for ?use ?by ?others. ? OWASP ?has ?unparalleled ?resources ?available ?to ? help ?organizations ?acquire, ?develop ?and ?operate ?applications ?sec