Application security architecture framework

Question

I'm writing a security architecture for the application I'm working with. I'm struggling in finding a framework to follow for this task. I can find a lot of frameworks like TOGAF and SABSA that works with enterprise security, but my task is more specific to an application. Have anyone worked with such a framework?

Answer 1

If you're looking for more specific application security architecture guidance, I'd be inclined to look at OWASP materials as they're more focused in this area.

Project like the OWASP Developer Guide, OWASP Application Security Verification Standard or OWASP Software Assurance Maturity Model could be of use in this context