Secure code review methodology

The Open Source Security Testing Methodology Manual (OSSTMM) might be similar to what you are looking for, but it is broader in scope then just code review.

http://www.isecom.org/projects/osstmm.htm

Noam Eppel
noam@noameppel.com
Web Security Consultant

>From: Mark Curphey <mark@curphey.com>
<jeff.williams@aspectsecurity.com>,webappsec@securityfocus.com
>Subject: Re: RES: Fail Open Authentication and Parameter Injection
>Date: 25 Mar 2003 13:01:56 -0800
>
>For a long time I have been trying to find people who are experts in
Received on Wed Mar 26 01:30:47 2003