RE: NIST Guide

>-----Original Message-----
>From: tlmacgi@xxxxxxxxxxx [mailto:tlmacgi@xxxxxxxxxxx] 
>Sent: Monday, August 29, 2005 3:06 PM
>To: websecurity@xxxxxxxxxxxxx
>Subject: RE: [WEB SECURITY] NIST Guide
>
>There is a project, of which NIST is a part, that is looking 
>at software
>assurance, including application code scanning, etc.
>
>http://samate.nist.gov/index.php/Main_Page


In fact they are hosting the OWASP conference next month:

http://www.owasp.org/conferences/appsec2005dc.html

If that's not taboo on the WASC list. :)

btw// they were interested in working with members of
the community and had an analysis workshop in August,
unfortunately, I was overseas and could not attend...

NIST though is clearly moving forward in evaluating
software assurance, web apps and otherwise....

I would not be surprised if they'd welcome contribution
from WASC folks.

-ae