OWASP SCVS Standard @OWASP_SCVS
Official OWASP Software Component Verification Standard (SCVS) account. Measure and improve software supply chain assurance. scvs.owasp.org Joined August 2019-
Tweets43
-
Followers225
-
Following11
-
Likes20
OWASP Members change the world. Your membership helps shape the organization and drives our projects and community. If you are not a member or are due for renewal within 60 days, please join or renew today and get 10-25% off! owasp.org/membership > Memberships > Apply
Earlier today, Technical Committee 54 was officially convened within @EcmaIntl as a royalty-free task group. #TC54 is chartered with standardizing #OWASP @CycloneDX_Spec, standards and algorithms that advance transparency and sharing of this information across the supply chain.
We published OWASP's response to the ONCD RFI on Open Source Security, mainly to do with memory-safe languages. More details: owasp.org/blog/2023/11/0… A huge thank you to all the OWASP Leaders who contributed. For media, please contact me on [email protected]
We’re proud to announce the immediate availability of the SCVS BOM Maturity Model. The model allows organizations to evaluate #SBOM quality and mature and optimize their investment in software and system transparency. einpresswire.com/article/665343… #OWASP
@owasp Foundation Joins Ecma International to Drive Software Transparency and Standardization of OWASP #CycloneDX. Press release: einpresswire.com/article/661184… Blog post: owasp.org/blog/2023/10/1… #SBOM #SoftwareTransparency #SaaSBOM #HBOM #CBOM #EO14028
Check out this article by Chris Hughes, then head over to scvs.owasp.org to read the standard and see how SCVS can help your organization measure and improve software supply chain assurance. #OWASP #SBOM #SoftwareSupplyChain
Check out this article by Chris Hughes, then head over to scvs.owasp.org to read the standard and see how SCVS can help your organization measure and improve software supply chain assurance. #OWASP #SBOM #SoftwareSupplyChain
🗒️ @owasp Software Component Verification Standard (SCVS) Overview by Chris Hughes on the 3 levels of maturity across 6 control categories * Inventory * SBOM * Build Environment * Package Management * Component Analysis * Pedigree and Provenance blog.aquia.us/blog/2022-09-2…
We're happy to announce that SCVS now has a dedicated website where project information can be found, the standard can be read, and in the near future the BOM Maturity Model can be explored. scvs.owasp.org #OWASP #SBOM #SoftwareSupplyChain
Reminder: Our next project meeting is on: July 21 at 14:00 UTC (9:00 CDT / 10:00 EDT). Meeting ICS: drive.google.com/open?id=1lS4oD… Agenda: - Continue work on BOM maturity model To Join: in: meet.google.com/whc-cqcy-nuy #SBOM #SoftwareSupplyChain #OWASP
The recording of my session at NDC Security is available! Learn about possible attacks against you supply chain and how to prevent against them:
@Jhaddix @owasp projects: @zaproxy @owasp_wstg @owasp_juiceshop @owaspTop10 @owasp_SKF @owaspControls @owaspSAMM @CoreRuleSet @owasp_MSTG @owasp_ASVS @DependencyTrack @owasp_SCVS @owasp_DevSlop @defectdojo @SecureCodeDojo @owaspCornucopia @appsensor @owaspiGoat #AppSec
ALL OWASP MEMBERS DID YOU VOTE YET? If not, you still have time to vote in the OWASP 2021 Global Board of Directors Election. PLEASE CHECK YOUR EMAIL FOR YOUR BALLOT. YOUR VOTE COUNTS! VOTE NOW!
Join #owasp as we celebrate our 20th Anniversary on Sept. 24! Register now for this 24-hour live, virtual, global FREE event. Agenda will include 5 keynotes, 4 tracks with speakers from around the world, and more! 20thanniversary.owasp.org
Mark your calendars! Come celebrate the 20th anniversary of @owasp with a tremendous lineup of speakers and industry experts. In relation to SCVS, #SBOM will be presented by @stevespringett and @coderpatros from @CycloneDX_Spec, a flagship OWASP Standards project.
Propose your topic for our #OWASP SAMM User Day - May 27th, 2021 - details here: owaspsamm.org/user-day/
The OWASP Software Component Verification Standard project is conducting the 2021 State of the SBOM Survey. Community participation is valuable as we assess the current and future role that Software Bill of Materials play in the industry. docs.google.com/forms/d/e/1FAI… #SBOM #OWASP
Detecting a #SolarWinds style attack is difficult. But you can dramatically reduce the likelihood of creating similar incidents by adopting #OWASP SCVS. It includes practical advice to measure and improve your #SoftwareSupplyChain. owasp.org/scvs
SBOM - you've got questions, we've got answers! The @NTIAgov SBOM Awareness & Adoption working group has finished v1 of an FAQ. All you ever wanted to know abt #SBOM but were too lazy to ask. Check it out, share it, & reply with more Qs that we should add ntia.gov/files/ntia/pub…
Andrew van der Stock @vanderaj
8K Followers 6K Following Please come see me on Linked In. DMs not monitored.
Sr.0xL.0x4951313437.e... @IG0xL_
591 Followers 6K Following 👻🇲🇽 pragma skills ↑=web2.0 ↓web3.5; SEMI Sr. Developer, Sr. Cybersecurity, Mid. Intelligence, 🧬 Intern. Weyland-Yutani Corp. 💚 I love Arena Breakout.
Patrick K. @PKDADON88
283 Followers 3K Following
John McN @McNJohnW
34 Followers 2K Following
a software engineer @foobar360
187 Followers 547 Following software engineer working in developer productivity and devops
Source Code Control L... @SourceCodeContr
2K Followers 3K Following Founded in 2014, Source Code Control is a leading consultancy specializing in Software Supply Chain Management. We help organizations where software is central
Peter Freiberg @PeterFreiberg
78 Followers 298 Following My passion is Application Security, DevSecOps and CodeAnalytics. @kospex
kospex @kospex
6 Followers 27 Following Kospex - know your code, know your developer. Insights about people and technology from git.
Network Service Mesh @nservicemesh
2K Followers 5K Following Join us on Bluesky: https://t.co/l70VbkKiXB | The Hybrid/Multi-cloud IP Service Mesh | A @CloudNativeFdn Sandbox Project
Art อาท แบ�... @bact
143K Followers 6K Following Arthit Suriyawongkul. Pushing #digitalrights #ict4d w @thainetizen @mekongict. PhDing #AIethics & accountability at @DREAL_ie @ADAPTCentre @TCDdublin.
Jeleit @JeleitWu
267 Followers 5K Following
Gerhard Funk @GerhardFunk
10 Followers 89 Following
KurSh @KurShf
49 Followers 2K Following
Advik @Ad_vi_k
80 Followers 5K Following
Arthur_HMSouza @AHmsouza
326 Followers 5K Following
Brian Hierholzer @BrianHierholzer
159 Followers 187 Following Chairman - https://t.co/PiJ2FbpUsQ Chairman - https://t.co/hQkDSt8Bqp CEO https://t.co/MJdR4edcr6, https://t.co/CEv1QW7Fxm, https://t.co/T6ASu2K9kD
KloudArkitect @KloudArk_AWS
402 Followers 5K Following Curator of #AWS and general #CloudArchitecture news and trends
Andreas Falk @andifalk
913 Followers 2K Following Executive Consultant @CGI_DE #iSAQB Trainer & Speaker #AppSec #OTSecurity #IAM #OAuth #OIDC #Kubernetes #Security Member of @owasp @openid
Tavi 🍕 @tiagotavi
436 Followers 914 Following Debugging the life. All opinions are my own. #Dogs #Linux #Hacking
Alex @alexanderwwj
14 Followers 52 Following
Rabia Nur @RabiaNurr
69 Followers 526 Following
SecIncidentDaily Repo... @bhatgoutam1
431 Followers 4K Following infosec reporter contact +916363122960 Goutam Bhat
Vibhav @v18h4vd
73 Followers 253 Following
Dave Ferguson @_sc0rn
611 Followers 664 Following Product Manager in Software Supply Chain Security. 20-year AppSec pro. Constant & curious learner. Former engineer/developer/consultant/pen tester/SA.
FishHead @RootMePLS
155 Followers 761 Following - CIO - Infrastructure overlord - Hiker and ultra runner
TChou @ollama99
5 Followers 402 Following
pokerbeau @pokerbeau0x
58 Followers 1K Following
kmahidul17 @kmahidul17
2 Followers 23 Following
Coal Miner @CoalMin91346596
0 Followers 107 Following
John Chenoweth @ChenowethJR
46 Followers 176 Following Cyber Security | CISSP | Application Security | I&AM | Amature Photographer
Florencio Cano @florenciocano
1K Followers 1K Following Secure Architecture Team Lead & Principal Product Security Architect @RedHat | Opinions are my own | https://t.co/YemKAWVq6X
V3XX @v3xx_ru
145 Followers 263 Following Bug bounty / AppSec ⨯ Eat. Sleep. Exploit. Repeat. ⨯ Запретят охоту - появятся браконьеры.
Paul @ismisepaul
333 Followers 973 Following Application Security | Software Dev | DevSecOps | Contributor @OwaspShepherd | @[email protected] #appsec #devsecops #infosec #owasp
Dec!!l!on @0x0DEC
281 Followers 2K Following """ Interested in #CyberSecurity & #Purple_Teaming #AI & #ML & #DL & #IOT #C/#C++ #Python #Perl #Ruby """
Somesh Rasal 🇮🇳 @rasal_somesh
215 Followers 3K Following CEH | CHFI | ECSA | Information Security Consultant | OSINT | Threat Intelligence Food | Travel | History | Reading
👷Eng. Ehab @ehab80m
288 Followers 3K Following
Anurag Acharya @AnuragCyberCop
70 Followers 492 Following Cyber Expert | Govt. Certified Cyber Crime Investigator | CTI Analysts |Dark Web | CEH | OSCP | CISA | ISC2
Foobeard Celine @despewbird
4 Followers 107 Following
MarcoNappi @Xaliom
76 Followers 698 Following Security Analyst , Penetration tester, OSCP, OSEP, OSWE, OSED, OSCE3, CRTP, CARTP, eternal n00b
Christopher Hughes @ResilientCyber
436 Followers 144 Following Cloud Security Leader | Cybersecurity Professor | Board Advisor | DevSecOps Advocate
Antonio Calero @acaleromon
514 Followers 1K Following Padre x3. Socio fundador de @excentia. Siempre con la misma filosofía: intentar hacer las cosas bien y ayudar a otros a intentar hacerlas mejor
Ruedana - Youtube @RuedanaYT
791 Followers 837 Following Apasionado de la seguridad informática y desde hace unos años subiendo videos sobre movilidad eléctrica a Youtube.
Dependency-Track @DependencyTrack
1K Followers 29 Following Open Source SBOM Analysis Platform. Reduce Supply Chain Risk. #OWASP #SBOM #SaaSBOM #HBOM #VEX #SoftwareSupplyChain… https://t.co/12EqTyufEE…
OWASP® Foundation @owasp
213K Followers 532 Following We improve the security of apps with community-led open source projects, 260 local chapters, and tens of thousands of members worldwide. Famous for OWASP Top 10
Christopher Hughes @ResilientCyber
436 Followers 144 Following Cloud Security Leader | Cybersecurity Professor | Board Advisor | DevSecOps Advocate
Rcncode @rcncode
16 Followers 183 Following
GitHub Security Lab @GHSecurityLab
26K Followers 15 Following GitHub Security Lab’s mission is to inspire and enable the community to secure the open source software we all depend on.
CycloneDX SBOM Spec (... @CycloneDX_Spec
954 Followers 8 Following OWASP CycloneDX is a modern standard for the software supply chain. Software Bill of Materials (SBOM), SaaSBOM, Cryptography (CBOM), AI/ML-BOM, VDR/VEX...
Software Heritage @SWHeritage
4K Followers 2K Following We collect, preserve, and share #software #sourcecode for present and future generations. #swh #softwarecommons #freesoftware #opensource
OpenChain Project @openchainproj
801 Followers 348 Following The OpenChain Project maintains the industry standards for open source license compliance and security assurance. Our global community helps with adoption.
OWASP SAMM @OwaspSAMM
1K Followers 16 Following The OWASP Software Assurance Maturity Model (SAMM) is the open framework to help you start and improve your secure software development lifecycle
OWASP Top10 @OWASPTop10
5K Followers 25 Following
OWASP ASVS Project @OWASP_ASVS
2K Followers 45 Following Official account for the OWASP Application Security Verification Standard (ASVS) project. Contribute on GitHub: https://t.co/QKpX4RG2xCTrends for United States
You might like
