Take the 2-minute tour ×
Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. It's 100% free.

When developing security, what tenets should you keep in mind and follow in order to practice due diligence?

share|improve this question

closed as not a real question by Aaronaught, Glenn Nelson, ChrisF Sep 9 '11 at 11:39

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center. If this question can be reworded to fit the rules in the help center, please edit the question.

This is preposterously vague. There's a whole Information Security Stack Exchange dedicated to it! –  Aaronaught Sep 8 '11 at 23:21
What's wrong with the OWASP site? owasp.org/index.php/Main_Page. What is incomplete about this? It seems to have a list of tenets. Why not use this? Since this list exists, what are you asking for? –  S.Lott Sep 9 '11 at 2:23
@Aaronaught: Maybe so, but I didn't see anything like it on here and it's a question I would like answered. –  Richard DesLonde Sep 9 '11 at 7:22
@S.Lott: The problem with owasp is it's web application only, and it's not on this site. –  Richard DesLonde Sep 9 '11 at 7:23
You could move this across to IT Security, as @Aaronaught hinted –  Rory Alsop Sep 9 '11 at 8:15

2 Answers 2

Take a look at the Principles identified by US-CERT. They are generic system-level rules independent of technologies and mechanisms.

share|improve this answer
That's exactly the kind of thing I am looking for. Thank you! –  Richard DesLonde Sep 9 '11 at 7:24

Trust no one. Including Mulder and definitely not Scully.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.