http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-27ra.pdf • NIST: SP800-64 Security Considerations in the SDLC http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-64r2.pdf • OWASP: Guía Para Construir Aplicaciones y Servicios Seguros https://www.scribd.com/document/112624664/OWASP-Development-Guide-2-0-1- S panish-pdf • OWASP: Lista de Verificación de Prácticas de Codificación Segura https://owasp.org/www-pdf-archive/OWASP_SCP_Quick_Reference_Guide_SPA.pdf • OWASP: SAMM 1.0 https://opensamm.org/downloads/SAMM-1.0.pdf • OWASP: Security Principles Project https://www.owasp.org/index.php/OWASP_Security_Principles_Project • OWASP: Top 10 Project https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project • Pluralsight: CSSLP Secure Software Concepts https://app.pluralsight.com/library/courses/csslp-secure-software-concepts/ • SAFECODE: Fundamental Practices for Secure Software Development https://safecode.org/publication/SAFECode_Dev_Practices1108.pdf • SAFECODE: Software Assuranse, Overview of Current Industry Best Practices https://safecode.org/publication/SAFECode_BestPractices0208.pdf • SAFECODE: Tactical Threat Modeling https://safecode.org/wp-content/uploads/2017/05/SAFECode_TM_Whitepaper.pdf • SCIPP: Secure Web Application Development Awaraness https://www.scippinternational.org/wp-content/uploads/2016/03/scipp-swada-gap-new.pdf • SEI CERT: Top 10 Secure Coding Practices https://wiki.sei.cmu.edu/confluence/display/seccode • SEI CMU: Secure SDLC Processes https://resources.sei.cmu.edu/asset_files/WhitePaper/2013_019_001_297287.pdf • SEI CMU: Secure Coding Best Practices https://www.youtube.com/watch?v=cU4dKMo13dk • Synopsys: BSIMM 7 https://www.synopsys.com/content/dam/synopsys/bsimm/reports/BSIMM7.pdf • University of Texas: Minimum Security Standards for Application Development and Administration https://security.utexas.edu/policies/standards_application • US-CERT: Build Security In https://us-cert.cisa.gov/bsi IF-2021-76718462-APN-DNCIB#JGM Página 28 de 35