ANÁLISE DO OWASP SAMM COMO FERRAMENTA DE MITIGAÇÃO DE FALHAS PROVENIENTES DE DESIGN INSEGURO

Abstract

As an increasingly connected society, guaranteeing the fundamental rights provided for the Brazilian constitution, like the right to privacy, is essential to keep the use of these technologies safe. The General Data Protection Law was enacted to ensure that personal data, whether sensitive or not, is treated in a protected way, holding both controllers and operators accountable in the event of information leaks. Since this regulation directly impacts software development companies, the objective of this work is to analyze whether the OWASP SAMM tool, combined with Privacy by Design, can help Information Technology professionals integrate security even in the project development phase to avoid Insecure Design flaws, an item added as a new category in the OWASP Top 10 of 2021. To elucidate the methodology presented by the maturity model, the ZAP vulnerability scanner was used to identify the gaps present in the study environment provided by OWASP, Juice Shop. Thus, the aim is to show that OWASP SAMM can be applied by any company, regardless of size, helping professionals who do not know how to implement the necessary security adjustments in their organizations.