The Security Development Lifecycle

The Security Development Lifecycle, 9780735622142 (0735622140), Microsoft Press, 2006

The software industry has been struggling with how to create and release software that is more security-enhanced and reliable— the Security Development Lifecycle (SDL) provides a methodology that works. Adapted from Microsoft's standard development process, SDL is a critical way to help reduce the number of security defects in code at every stage of the development process, from design to release. In addition to a brief history of the methodology, this book details each stage of the SDL methodology and discusses its implementation across a range of Microsoft software, including MicrosoftÐ® Windows Server™ 2003, Microsoft SQL Server™ 2000 Service Pack 3, and Microsoft Exchange Server 2003 Service Pack 1, to help measurably improve security features. Coauthored by Michael Howard and Steve Lipner, you get direct access to insights from Microsoft's security team and lessons that are repeatable and applicable to software development processes worldwide, whether on a small-scale or large-scale. This book includes a CD featuring videos of developer training classes.

It's probably best to start by explaining who is not the primary audience for this book; this is not a book for developers. That said, we don't mean that developers should not read this book. We mean there is very little code in this book and no real implementation best practices that would apply to developers. This book is more broadly aimed at two sets of people. The first group includes management and people who manage software development teams and the software development processes within their organizations. The second group includes designers and architects.

Comments

Amazing Books

Advanced Linux Programming

Sams Publishing, 2001

Advanced Linux Programming is divided into two parts. The first covers generic UNIX system services, but with a particular eye towards Linux specific information. This portion of the book will be of use even to advanced...

Designing Software-Intensive Systems: Methods and Principles (Premier Reference Source)

IGI Global, 2008

Design for software-intensive systems requires adequate methodology and tool support in order for researchers and practitioners to make use of and develop very large and complex systems. Software engineering environments help reduce the design costs of very large and intricate software systems while improving the quality of the software produced....

Business Agility: Strategies for Gaining Competitive Advantage through Mobile Business Solutions

FT Press, 2001

There is little doubt that recent developments in the wireless and information technology industries will have a profound influence on the way business is done. Beyond that, the new “way” is still emerging, and the path to get there is still unclear. These new technologies only have value to the extent that business processes, in their...

Learn Lua for iOS Game Development

Apress, 2012

Apple has been issuing checks to developers, and the 2012 figures indicate that it has so far been to the tune of $5 billion. In the past, it used to be desktops with Microsoft-based products that were raking in money for developers, with Visual Basic, or earlier with database products such as dBase and FoxPro. While the major share...

Space Technologies for the Benefit of Human Society and Earth

Springer, 2009

When discussing the advancement of space science and space technology, most people instinctively think about deep space flights, lunar stations, and thrilling outer space adventures. The fact is that the majority of the human technology in space, which consists of interconnected satellites, points towards Earth, and is used to provide services...

Interaction Design

John Wiley & Sons, 2002

INTERACTION DESIGN: BEYOND HUMAN-COMPUTER INTERACTION is an up-to-date exposition of the design of the current and next generation interactive technologies, such as the Web, mobiles, and wearables. These exciting new technologies bring additional challenges for designers and developers-challenges that require careful thought and...