references.md

References & Resources

Official Course

• Linux Foundation: Developing Secure Software (LFD121)

Standards & Guidelines

• OWASP Top Ten: https://owasp.org/www-project-top-ten/
• NIST Secure Software Development Framework (SSDF): https://csrc.nist.gov/publications/detail/sp/800-218/final
• SLSA (Supply-chain Levels for Software Artifacts): https://slsa.dev/

Books

• Writing Secure Code – Michael Howard, David LeBlanc
• The Tangled Web – Michal Zalewski
• Building Secure and Reliable Systems – Google SRE team

Tools

• SAST: SonarQube, Semgrep
• DAST: OWASP ZAP, Burp Suite
• SCA: Dependency-Check, Snyk, Trivy

Further Reading

• Microsoft SDL: https://www.microsoft.com/en-us/securityengineering/sdl
• CNCF Security Whitepaper: https://github.com/cncf/tag-security