SDL - Baking Security In http://www.bakingsecurityin.com/ The Amazing Adventures of Kevlarr and the SDL. en-us Strip 1: Kevin's World. http://download.microsoft.com/download/3/4/F/34F9CC2C-16B3-4ACF-B4C1-8F9C50D55B14/Strip_1.pdf Introduce Kevin and his ability to project himself into the computer world to visualize the code he is developing.]]> Thu, 06 Nov 2008 22:18:15 GMT 2008-11-06 Strip 2: Reality Intrudes. http://download.microsoft.com/download/a/e/a/aea3fdd6-6072-4b24-97e1-aee57b218ed0/Strip_2.pdf We meet Kevin and his co-workers, the development team at Contoso.]]> Thu, 06 Nov 2008 23:18:15 GMT 2008-11-06 Strip 3: Security is Job One. http://download.microsoft.com/download/9/F/4/9F46ECF1-6F6F-4034-9708-7B421A203DB0/Strip_03.pdf Kevin and his team get a briefing on the importance of developing secure code, but they take it less than seriously.]]> Fri, 21 Nov 2008 2:18:15 GMT 2008-11-20 Strip 4: Taking Stock. http://download.microsoft.com/download/9/5/2/95219C3B-D2C8-47A5-82C4-0B192E9F3AE1/Strip_04.pdf Kevin and his pals discuss security, but Kevin obviously sees it as less important than writing elegant features for his application.]]> Wed, 3 Dec 2008 2:58:15 GMT 2008-12-04 Strip 5: Working Late. http://download.microsoft.com/download/0/9/E/09EA6E90-EF17-47DF-A8D4-82E2EF3A2E1B/Strip_05.pdf Kevin discovers an intruder while working late on his application.]]> Wed, 10 Dec 2008 20:28:15 GMT 2008-12-10 Strip 6: The Attack Begins. http://download.microsoft.com/download/6/5/A/65AEFC1D-3617-4C2B-9E90-BBCE78FC184C/Strip_06.pdf Malware intruders exploit security weaknesses to launch an attack!]]> Fri, 19 Dec 2008 20:28:15 GMT 2008-12-19 Strip 7: The Legion of Malware Strikes. http://download.microsoft.com/download/6/5/A/65AEFC1D-3617-4C2B-9E90-BBCE78FC184C/Strip_07.pdf The intruders open the door to a full-fledged attack by the Trojan, the Bandwidth Hog, SpamBot, and the shambling armies of BotNet Drones.]]> Wed, 7 Jan 2009 21:28:15 GMT 2009-01-07 Strip 8: Helpless in the Face of Doom! http://download.microsoft.com/download/C/4/F/C4F185C5-C9DE-48D4-A8F4-434CC4603A8B/Strip_08.pdf Kevin's meager security countermeasures are no match for the onslaught of the Legion of Malware.]]> Thu, 15 Jan 2009 19:28:15 GMT 2009-01-15 Strip 9: Crawling from the Wreckage. http://download.microsoft.com/download/C/4/F/C4F185C5-C9DE-48D4-A8F4-434CC4603A8B/Strip_09.pdf Kevin has to face his boss and coworkers and tell them the application has been compromised, just weeks from the official launch. His boss tells him to seek out the SDL to gain the skills he needs to shore up the application.]]> Wed, 21 Jan 2009 21:28:15 GMT 2009-01-21 Strip 10: Enter...the SDL! http://download.microsoft.com/download/8/A/9/8A947C67-6C9A-4914-8663-FAC6CB3F12E5/Strip_10.pdf Kevin goes back online and encounters Vigil, the leader of the SDL, an elite squad of security specialists who turn developers into black-belt security coding ninjas.]]> Wed, 11 Feb 2009 21:28:15 GMT 2009-02-11 Strip 11: Mind Over Menace. http://download.microsoft.com/download/B/4/F/B4F12F89-2244-4B28-88EF-588DFD9464E0/Strip_11.pdf Vigil teaches Kevin the arts of threat analysis, including threat modeling and attack surface reduction.]]> Wed, 11 Feb 2009 21:28:15 GMT 2009-02-11 Strip 12: The nForcement Imperative. http://download.microsoft.com/download/6/1/8/618DDD86-6402-4E5B-913B-BB4BF9471102/Strip_12.pdf nForcer gives Kevin an entertaining lesson in using tools and countermeasures, including the potent Static Analyzer, to keep enemies at bay.]]> Thur, 24 Feb 2009 21:28:15 GMT 2009-02-24 Strip 13: Think Like the Enemy. http://download.microsoft.com/download/0/7/9/079E4A3D-59D1-41F6-B4D2-DF9BF9F8A594/Strip_13.pdf Dood schools Kevin on the dark arts of security science, drawing on his own checkered past as a reformed hacker.]]> Thur, 05 Mar 2009 21:28:15 GMT 2009-03-05 Strip 14: A Hero is Born. http://download.microsoft.com/download/B/D/1/BD1D2D6E-AED2-4CAE-A4DF-92625491DE32/Strip_14.pdf After undergoing a final challenge to face his fears, Kevin becomes a security superhero.]]> Thur, 18 Mar 2009 18:30:01 GMT 2009-03-18 Strip 15: Project: Fortress. http://download.microsoft.com/download/0/2/2/0220D0C3-C9DC-43D6-A5C8-BDA549CB275F/Strip_15.pdf Applying his new skills, Kevin rebuilds his application to withstand the onslaught from the Malware villains.]]> Thur, 25 Mar 2009 18:30:01 GMT 2009-03-25 Strip 16: Project: A New Sheriff in Town http://download.microsoft.com/download/1/5/1/151B62E2-AEAB-44EF-899D-5A4629D9C51B/Strip_16.pdf The Malware villains find that Kevin, armed with his SDL training, is no longer so easy to beat!]]> Thur, 04 APR 2009 18:30:01 GMT 2009-04-08 Strip 17: Project: In Final Battle http://download.microsoft.com/download/1/5/1/151B62E2-AEAB-44EF-899D-5A4629D9C51B/Strip_17.pdf Kevin, Marco and Tram turn the tables on the Social Engineer.]]> Thur, 15 APR 2009 18:30:01 GMT 2009-04-15 Strip 18: A Safe Launch is a Successful Launch http://download.microsoft.com/download/F/B/7/FB7E76D5-9F9D-4461-97FE-1C175BB6749B/Strip_18.pdf Back in the real world, the earth-shattering secret of the SDL is finally revealed!]]> Thur, 23 APR 2009 18:30:01 GMT 2009-04-23