Creating a Safer, More Trusted Internet

United States Change | All Microsoft Sites

End to End Trust Progress

"SDL for Agile enables companies with short release cycles to use the Microsoft SDL best practices and tools."

SECURITY & PRIVACY FUNDAMENTALS

How the Microsoft SDL contributes to a safer, more trusted Internet

Microsoft Corporation, 2010

The Microsoft Security Development Lifecycle (SDL) helps companies to secure data and privacy for their organizations and their customers.

In the last few years, the Microsoft SDL group has updated the Microsoft SDL process guidance, created new Microsoft SDL tools, and introduced SDL ProNetwork members who help companies implement and adopt the Microsoft SDL.

The Microsoft SDL contributes to innovation and success in the following ways:

SDL for Agile helps vendors and software development contractors write more secure code. Microsoft released the SDL for Agile process guidance at the Microsoft TechEd Europe Conference. SDL for Agile enables companies with short release cycles to use the Microsoft SDL best practices and tools.
Simplified SDL helps companies integrate security practices in their own software development processes. Simplified SDL provides a minimum threshold for SDL compliance.
SDL Template tools help ensure code compliancy. Microsoft recently released the SDL for Agile template and the Microsoft SDL Process templates for Microsoft Visual Studio Team System (VSTS) 2008 that help development teams make sure that any code they write complies with SDL secure development practices. These templates also help with security workflow tracking.
SDL threat modeling helps companies discover and correct design-level security problems. Threat modeling is a core component of the design phase in the Microsoft Security Development Lifecycle (SDL).
The Microsoft SDL ProNetwork provides expertise worldwide. The SDL ProNetwork is a group of security consultants, training companies, and tool providers that specialize in application security and have substantial experience and expertise with the methodology and technologies of the SDL. The network was expanded recently to include seven new members.