A Look Inside the Security Development Lifecycle at Microsoft

http://msdn.microsoft.com/msdnmag/issues/05/11/SDL/

This article discusses:Overview of the Security Development Lifecycle
Security in the design and development processes
Threat modeling and testing
Security reviews and responses

Contents

Leadership and Education
The Design Phase
Threat Modeling
The Development Phase
Security Testing
Starting a Security Push
Final Security Reviews
The Security Response
Does SDL Work?