Important! Selecting a language below will dynamically change the complete page content to that language.
This document illustrates the core concepts of the Microsoft Security Development Lifecycle (SDL) and discusses the individual security activities that should be performed in order to follow the SDL process. The Simplified SDL guidance is also available under an Excel spreadsheet format.
Note:
There are multiple files available for this download.
Once you click on the "Download" button, you will be prompted to select the files you need.
Simplified Implementation of the SDL.doc
Simplified SDL_Spreadsheet.xlsx
-
This paper presents:
• A brief overview of the Microsoft SDL.
• An overview of the Microsoft SDL Optimization Model with particular attention to where the Microsoft SDL fits within the Optimization Model.
• A discussion of individual Microsoft security development practices, including: roles and responsibilities for individuals involved in the application development process, mandatory security activities, optional security activities, the application security verification process.
The Simplified SDL guidance is also available under an Excel spreadsheet format. This spreadsheet lists the 16 mandatory SDL security practices along with implementation details and resources for each practice.
Supported Operating System
Windows 2000, Windows 7, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP
