ColdFusion Security Best Practices

[PHRED-SE]

I want to make sure that my systems are in tune with the current thinking on security best practices.  I have been reviewing and planning on implementing new features as proposed in the Adobe White Paper titled "ColdFusion 8 developer security guildelines" by Erick Lee, Ivan Lelven, and Sarge Sargent, dated Octobe 2007.  While this is a great white paper, I'm wondering if this is the state-of-the-art in terms of security.

Does anyone know of a better/newer/more comprehensive reference?

Thanks in advance for your help in this matter.

:-}

Len

[Steve Sommers]

Try

www.owasp.org.

[PHRED-SE]

Steve,

     Thanks for the suggestion.  I downloaded the guide and will look it over in more detail later.  At first glance, I think the CF 8 guide is more on point.

:-}

Len