In typical monster corporation style, Hewlett-Packard’s Web site is painfully difficult to browse around, much less find what you’re looking for when it comes to, well, pretty much anything. There is an exception however that benefits all of us in information security. It’s HP’s Application Security Center Resource Library. It’s chock full of goodies from HP (and former SPI Dynamics) engineers, developers, and Web security evangelists.
In addition to more recent material, there are links to several whitepapers and articles I authored/ghost-authored for SPI Dynamics a few years back on regulatory compliance and performing Web vulnerability assessments (under the Technical Approaches and Legal and Regulatory Compliance headings). You may also want to check out their blogs under the HP Security Labs heading. Again, yucky user experience but great information if you can find your way through the thicket.
All in all a good resource for Web security if you’re looking to brush up on the subject.
“A business associate referred our company to Principle Logic when we were seeking a resource to perform vulnerability /penetration testing for our external and internal networks. We found Kevin Beaver to be professional, well informed, and easy to work with. His testing did not disrupt our networks, and his progress updates were timely.
His final report was very thorough and included security recommendations for our network environment. The executive leadership was so impressed with Kevin’s security expertise, they have extended their agreement to continue to perform periodic testing. We highly recommend Kevin Beaver and Principle Logic as a resource for network security testing.”