Secure Cloud Development Resources

Force.com Secure Cloud Development Resources

Force.com Secure Cloud Development provides guidance on when different security work should happen during the development lifecycle. Teams should tailor the freely available resources we've provided to their current development program. Doing so will help ensure a higher quality product with fewer security issues.

Image:ovw_icon_isv.gif

(Secure) Education
If you’re not sure where to start ramping up on Force.com security, this is the place to be. Everyone wants to do the right thing, but security is often perceived as black magic. Our training section dispels this myth and you can take advantage of the valuable resources you’ll find here to get started in the right direction.
Overview of Force.com Security
Writing Secure Force.com Apps Online Training
Developer Quiz

Image:ovw_icon_dev.gif

(Secure) Design
This is a crucial time in defining the security requirements and ensuring your staff is appropriately trained on security. Catching security flaws at this stage will save your company serious time and effort in the future.
Security Resources
Security Self Assessment Tool
Office Hours

Image:ovw_icon_dev.gif

(Secure) Development
Setting strong requirements or guidelines at this stage will help to ensure that your development team has written code with security in mind.
Secure Coding Guidelines
Secure Coding Library

Image:ovw_icon_dev.gif

(Secure) Testing
During this time, focus your efforts on ensuring that the requirements defined earlier have been appropriately followed and nothing slipped through the cracks.
Force.com Security Source Scanner
Web Application Security Scanner

Image:ovw_icon_isv.gif

(Secure) Release
Now that you’re ready to release, you’ll need a plan to address any security flaws found internally and externally.
AppExchange Security Review
Incident Response (Coming Soon)
Retrieved from "http://wiki.developerforce.com/page/Secure_Cloud_Development_Resources"