The SANS Software Security Community provides a variety of resources. Interact with your fellow professionals and appsec experts on the SANS AppSec Blog or discover solutions to appsec related issues with a multitude of webcasts.


One-Click Forensic Analysis: A SANS Review of EnCase Forensic
By Jake Williams on Jun 27, 2018

Cloud Security: Are You Ready?
By Dave Shackleford on Jun 18, 2018

Tailoring Intelligence for Automated Response
By Sonny Sarai on May 2, 2018

View More

How To Guide

The SANS Developer How To Guide provides developers with simple code examples that quickly show how to prevent common security vulnerabilities.

Read More


NoSQL Doesn’t Make you NoVulnerable
By Johannes Ullrich on Apr 21, 2017

Mobile App Security Trends and Techniques
By Gregory Leonard on Apr 7, 2017

Struts-Shock: Current Attacks against Struts2 and How to Defend Against Them
By Johannes Ullrich and Jonathan Mandell on Apr 6, 2017

View More


By Jason Lam and Dr. Johannes Ullrich

AJAX and Web 2.0 Security
By Jason Lam and Dr. Johannes Ullrich

The Value of Code Scanning
By Dinis Cruz