quick fix for broken link to secureby.design

jgadsden · jgadsden · commit 25cfdf3bbb25 · 2025-07-04T08:50:30.000+01:00
diff --git a/docs/en/03-requirements/07-skf.md b/docs/en/03-requirements/07-skf.md
@@ -1,10 +1,10 @@
 ![SKF logo](../../assets/images/logos/skf.png "OWASP SKF"){ align=right width=180 }
 
-The [Security Knowledge Framework][skf] (SKF) is a system that uses draws on the material in various
-open source projects to support development teams and security architects in building secure applications.
+The [Security Knowledge Framework][skf] (SKF) is a system that draws on material in various
+open source projects to a context for development teams and security architects when building secure applications.
 
-Having been an OWASP flagship project for many years the SKF is now no longer within the OWASP organization;
-and it will continue to be referenced in the OWASP Wayfinder and other OWASP projects
+Having been an OWASP flagship project for many years the SKF is now no longer an OWASP project;
+it continues to be referenced in the OWASP Wayfinder and other OWASP projects
 because it is a flagship project for any organization.
 
 #### What is the Security Knowledge Framework?
@@ -13,21 +13,13 @@ The [SKF][skf] is a web application that provides context and training
 to help security architects identity security requirements.
 As their website puts it: "Training and guidance for doing AppSec right!"
 
-Note that SKF is in a process of migrating to a [new repository][skfrepo] so the download links may change.
-
-The SKF provides guidance for application security in several areas:
-
-* Requirements [organizer][skfreqs]
-* Learning [courses][skfdemo]:
-  * Developing Secure Software (LFD121)
-  * Understanding the OWASP Top 10 Security Threats (SKF100)
-  * Secure Software Development: Implementation (LFD105x)
-* Practice [labs][skflabs]
-* Documentation on [installing and using][skfdocs] the SKF
+The SKF provides guidance for application security requirements using the [SKF Organizer][skfreqs].
 
 The SKF builds on the OWASP [Application Security Verification Standard][asvs] (ASVS)
 to help developers in both pre-development and post-development phases and create applications that are secure by design.
 
+Note that SKF is in a process of migrating to a [new repository][skfrepo] so the download links may change.
+
 #### Why use the SKF for requirements?
 
 The SKF organizes security requirements into various categories that provides a good starting point for application security.
@@ -49,7 +41,8 @@ The SKF organizes security requirements into various categories that provides a
 
 #### How to use the SKF for requirements
 
-There is [a demo version][skfdemo] of SKF that is useful for exploring the multiple perspectives of the SKF.
+The demo version of SKF can be useful for exploring the multiple perspectives of the SKF,
+access the latest demo from the [main SKF site][skf].
 
 Follow the documentation on [installing and using][skfdocs] the SKF.
 
@@ -62,7 +55,6 @@ The OWASP Spotlight series provides an overview of the SKF: 'Project 7 - [Securi
 #### References
 
 * [Security Knowledge Framework][skf] (SKF)
-* [SKF courses and labs][skfdemo]
 * [SKF requirements][skfreqs]
 * OWASP [Application Security Verification Standard][asvs] (ASVS)
 
@@ -75,9 +67,7 @@ then [submit an issue][issue0507] or [edit on GitHub][edit0507].
 [edit0507]: https://github.com/OWASP/DevGuide/blob/main/docs/en/03-requirements/07-skf.md
 [issue0507]: https://github.com/OWASP/DevGuide/issues/new?labels=enhancement&template=request.md&title=Update:%2003-requirements/07-skf
 [skf]: https://www.securityknowledgeframework.org/
-[skfdemo]: https://secureby.design/
 [skfdocs]: https://skf.readme.io/docs/introduction
-[skflabs]: https://secureby.design/labs
 [skfrepo]: https://github.com/Security-Knowledge-Framework
 [skfreqs]: https://github.com/Security-Knowledge-Framework/SKF-requirements-tool
 [spotlight07]: https://youtu.be/TFX_ZBy6lNY
diff --git a/docs/en/05-implementation/index.md b/docs/en/05-implementation/index.md
@@ -8,9 +8,9 @@ and an important goal of Implementation is to ship reliably working software wit
 
 Implementation should include security practices such as :
 
-* Secure Build
-* Secure Deployment
-* Defect Management
+* [Secure Build][sammisb]
+* [Secure Deployment][sammisd]
+* [Defect Management][sammidm]
 
 Implementation is where the application / system begins to take shape; source code is written and tests are created.
 The implementation of the application follows a secure development lifecycle, with security built in from the start.
@@ -19,9 +19,6 @@ The implementation will use a secure method of source code control and storage t
 The development team will be referring to documentation advising them of best practices,
 they will be using secure libraries wherever possible in addition to checking and tracking external dependencies.
 
-Much of the skill of implementation comes from experience, and taking into account the Do's and Don'ts
-of secure development is an important knowledge activity in itself.
-
 ----
 
 The OWASP Developer Guide is a community effort; if there is something that needs changing
@@ -31,3 +28,6 @@ then [submit an issue][issue0700] or [edit on GitHub][edit0700].
 [issue0700]: https://github.com/OWASP/DevGuide/issues/new?labels=enhancement&template=request.md&title=Update:%2005-implementation/index
 [sammm]: https://owaspsamm.org/model/
 [sammi]: https://owaspsamm.org/model/implementation/
+[sammidm]: https://owaspsamm.org/model/implementation/defect-management/
+[sammisb]: https://owaspsamm.org/model/implementation/secure-build/
+[sammisd]: https://owaspsamm.org/model/implementation/secure-deployment/
diff --git a/docs/en/07-training-education/03-skf.md b/docs/en/07-training-education/03-skf.md
@@ -1,11 +1,11 @@
 ![SKF logo](../../assets/images/logos/skf.png "OWASP SKF"){ align=right width=180 }
 
 The [Security Knowledge Framework][skf] (SKF) is a training system that draws on various open source projects
-to support development teams and security architects in building secure applications.
+to train development teams and security architects in building secure applications.
 
-Having been an OWASP flagship project for many years the SKF is now no longer within the OWASP organization;
-it will continue to be referenced in the OWASP Wayfinder and other OWASP projects
-because it is certainly a flagship project for any organization.
+Having been an OWASP flagship project for many years the SKF is now no longer an OWASP project;
+it continues to be referenced in the OWASP Wayfinder and other OWASP projects
+because it is a flagship project for any organization.
 
 #### What is the Security Knowledge Framework?
 
@@ -18,14 +18,17 @@ to help developers in pre-development and post-development phases and create app
 The SKF provides training and guidance in several ways:
 
 * Requirements [organizer][skfreqs]
-* Learning [courses][skfdemo]
-* Practice [labs][skflabs]
+* Learning courses and demos:
+  * Developing Secure Software (LFD121)
+  * Understanding the OWASP Top 10 Security Threats (SKF100)
+  * Secure Software Development: Implementation (LFD105x)
+* Practice labs]
 
 Note that SKF is in a process of migrating to a [new repository][skfrepo] so the download link may change.
 
 #### Why use the SKF?
 
-The SKF provides both [learning courses][skfdemo] and [practice labs][skflabs]
+The SKF provides both learning courses and practice labs
 that are useful for development teams to practice secure coding skills.
 
 The following learning courses are available (as of December 2023):
@@ -41,7 +44,7 @@ In addition to the training courses there are a wide range of practice labs (64
 
 #### How to use the SKF
 
-The easiest way to get started with the SKF training is to [try the online demo][skfdemo].
+The easiest way to get started with the SKF training is to try the online demo from their [main web site][skf].
 This will provide access to the practice labs, the training courses and also to the requirements tool.
 
 Follow the documentation on [installing and using][skfdocs] the SKF.
@@ -51,7 +54,6 @@ The OWASP Spotlight series provides an overview of the SKF: 'Project 7 - [Securi
 #### References
 
 * [Security Knowledge Framework][skf] (SKF)
-* [SKF courses and labs][skfdemo]
 * [SKF requirements][skfreqs]
 * OWASP [Application Security Verification Standard][asvs] (ASVS)
 
@@ -65,9 +67,7 @@ then [submit an issue][issue0903] or [edit on GitHub][edit0903].
 [issue0903]: https://github.com/OWASP/DevGuide/issues/new?labels=enhancement&template=request.md&title=Update:%2007-training-education/03-security-knowledge-framework
 [linuxtraining]: https://training.linuxfoundation.org/full-catalog/
 [skf]: https://www.securityknowledgeframework.org/
-[skfdemo]: https://secureby.design/
 [skfdocs]: https://skf.readme.io/docs/introduction
-[skflabs]: https://secureby.design/labs
 [skfrepo]: https://github.com/Security-Knowledge-Framework
 [skfreqs]: https://github.com/Security-Knowledge-Framework/SKF-requirements-tool
 [spotlight07]: https://youtu.be/TFX_ZBy6lNY
diff --git a/docs/es/03-requirements/07-skf.md b/docs/es/03-requirements/07-skf.md
@@ -14,18 +14,15 @@ porque es un proyecto insignia para cualquier organización.
 #### ¿Qué es el Security Knowledge Framework?
 
 El [SKF][skf] es una aplicación web que está disponible en el [repositorio de github][skfinstall].
-Hay una [versión demo][skfdemo] de SKF que es útil para explorar los múltiples beneficios del SKF.
+Hay una versión demo de SKF que es útil para explorar los múltiples beneficios del SKF.
 Tenga en cuenta que SKF está en proceso de migración a un [nuevo repositorio][skfrepo]
 por lo que el enlace de descarga puede cambiar.
 
 El SKF proporciona capacitación y orientación para la seguridad de aplicaciones:
 
 * [Organizador][skfreqs] de requisitos
-* [Cursos][skfdemo] de aprendizaje:
-  * Desarrollo de Software Seguro (LFD121)
-  * Entendiendo las 10 Principales Amenazas de Seguridad de OWASP (SKF100)
-  * Desarrollo de Software Seguro: Implementación (LFD105x)
-* [Laboratorios][skflabs] de práctica
+* Cursos de aprendizaje
+* Laboratorios de práctica
 * Documentación sobre [instalación y uso][skfdocs] del SKF
 
 #### ¿Por qué usar el SKF para requisitos?
@@ -61,7 +58,6 @@ La serie OWASP Spotlight proporciona una visión general del SKF:
 #### Referencias
 
 * [Security Knowledge Framework][skf] (SKF)
-* [Cursos y laboratorios de SKF][skfdemo]
 * [Requisitos de SKF][skfreqs]
 * OWASP [Estándar de Verificación de Seguridad de Aplicaciones][asvs] (ASVS)
 
@@ -77,10 +73,8 @@ entonces [cree un issue][issue0507] o [edítelo en GitHub][edit0507].
 [en0507]: https://devguide.owasp.org/en/03-requirements/07-skf/
 [issue0507]: https://github.com/OWASP/DevGuide/issues/new?labels=enhancement&template=request.md&title=Update:%2003-requirements/07-skf
 [skf]: https://www.securityknowledgeframework.org/
-[skfdemo]: https://secureby.design/
 [skfdocs]: https://skf.readme.io/docs/introduction
 [skfinstall]: https://github.com/blabla1337/skf-flask/releases
-[skflabs]: https://secureby.design/labs
 [skfrepo]: https://github.com/Security-Knowledge-Framework
 [skfreqs]: https://github.com/Security-Knowledge-Framework/SKF-requirements-tool
 [spotlight07]: https://youtu.be/TFX_ZBy6lNY
