The author draws on experiences gained as a member of Microsoft's central security team to outline some basic best practices for the software development process. These practices benefitted Microsoft products released since the inception of its Trustworthy Computing initiative in 2002. The points are a subset of the security development lifecycle process implemented at Microsoft.
No takes yet. Share an insight, caveat, or question.
Michael Howard (2004) studied this question.
Synapse has enriched 5 related papers. Consider them for comparative context: