Security Development Lifecycle

Chapter 1. Enough Is Enough: The Threats Have Changed

In this chapter:

Worlds of Security and Privacy Collide
Another Factor That Influences Security: Reliability
It’s Really About Quality
Why Major Software Vendors Should Create More Secure Software
Why In-House Software Developers Should Create More Secure Software
Why Small Software Developers Should Create More Secure Software

The adage “Necessity is the mother of invention” sums up the birth of the Security Development Lifecycle (SDL) at Microsoft. Under the banner of Trustworthy Computing (Microsoft 2002), Microsoft heard the call from customers requiring more secure software from their software vendors and changed its software development process to accommodate customers’ pressing security ...