Kesekit Guide

KESE Secure Coding Prompt Generator

Generate secure coding prompts based on KISA guidelines and international standards (OWASP, CWE).

Guideline Selection

Zero Trust, ZTA, ZTNA, 제로트러스트, 마이크로세그멘테이션, microsegmentation, SDP, SASE, PEP/PDP, never trust always verify → Zero Trust SBOM, supply chain, 공급망, C-SCRM, SCA, CycloneDX, SPDX, npm audit, pip-audit → SW Supply Chain

CII Branch

Reference templates/cii/webapp.md for CWE-based patterns. Check commands available in scripts/cii/ directory. Generate language-specific prompts (Python, JavaScript, Java, Go, etc.) and function-specific prompts (auth, file upload, API security).

AI Security Branch

Reference templates/ai-security/developer.md and references/ai-security/overview.md. Generate prompts for: Prompt Injection defense, Data Poisoning prevention, Model Extraction protection, LLM security, RAG pipeline security.

Robot Security Branch

Reference templates/robot-security/overview.md first, then use ssdf.md, supply-chain.md, iec62443.md, cyber-resilience.md, or wireless.md from templates/robot-security/ depending on whether the user needs prompts for firmware, ROS/ROS2 nodes, robot APIs, field protocols, supply chain controls, or wireless interfaces.

Space Security Branch

Reference references/space-security/overview.md first, then use domain-specific files from templates/space-security/ for satellite communication encryption, ground station access control, GSaaS API security, and references/space-security/supply-chain.md for SBOM, anti-jamming/anti-spoofing, or CMMC/NIS2/K-RMF compliance.

Secure Coding (Language) Branch

Reference references/secure-coding/overview.md for 7 categories and 49 CWE mappings. Use references/secure-coding/pseudocode.md for language-agnostic patterns (46 items, UNSAFE/SAFE pairs). For language-specific prompts, use templates/secure-coding/javascript.md (Express.js, Sequelize, Node.js) or templates/secure-coding/python.md (Django, Flask, SQLAlchemy).

Auto-detection

• JavaScript, Node.js, Express, React, Vue → templates/secure-coding/javascript.md
• Python, Django, Flask, FastAPI → templates/secure-coding/python.md
• Other languages (Go, Java, Rust, C#) → references/secure-coding/pseudocode.md (AI adapts patterns)
• General / language-agnostic → references/secure-coding/pseudocode.md

Zero Trust Branch

Reference references/zero-trust/overview.md for ZT architecture and references/zero-trust/maturity-model.md for maturity definitions. Use templates/zero-trust/overview.md for assessment guide. Generate ZT implementation prompts based on element-specific templates. For OT/ICS environments, reference templates/zero-trust/ot-environment.md and references/zero-trust/ot-guide.md.

8 core elements, ~396 items across 4 maturity levels. Standards: KISA ZT Guideline 2.0, NIST SP 800-207, CISA ZT Maturity Model.

SW Supply Chain Branch

Reference references/supply-chain/overview.md for C-SCRM framework, SBOM standards, and regulatory landscape. Use templates/supply-chain/sbom-checklist.md for the 29-item checklist. Generate prompts for: SBOM generation (Syft, CycloneDX), vulnerability scanning (Grype, npm audit, pip-audit), CI/CD pipeline integration, license compliance, and NIS-SBOM compliance.

Auto-detection

• npm, yarn, pip, maven, gradle, cargo → language-specific SBOM prompts
• CI/CD, GitHub Actions, GitLab CI → pipeline integration prompts
• Government/public sector delivery → NIS-SBOM compliance prompts

Usage

Copy the generated prompt into your AI assistant conversation, then request code.