Microsoft takes Security Development Lifecycle to all developers
Microsoft will launch new additions to its Security Development Lifecycle (SDL) programme today, designed to enable all software developers to integrate the SDL more tightly into the development process, and ultimately create a more secure software ecosystem.
A free Visual Studio process template has been made available to download from MSDN, integrating SDL 4.1 into the software development environment for organisations using Visual Studio Team System.
The template provides guidance on how to implement the SDL into development, offering links to online resources and explaining how to extend it to third-party security tools. "The template integrates policy, process and tools into software development management projects in a very usable way," said Steve Lipner, senior director of security engineering strategy for Microsoft's Trustworthy Computing initiative.
