Microsoft has released a free tool, the SDL Process Template, for its Visual Studio Team System platform. The tool is intended to help developers easily add security and privacy to their applications. Microsoft says that the tool is derived from its own software security assurance process developed in 2004 which it dubs the Security Development Lifecycle. This new tool is now available for download on MSDN.
According to David Ladd, principal security program manager of Microsoft’s Security Development Lifecycle team:
“The SDL Process Template provides application developers with easy to use built-in guidance, auditable security requirements and reports, and can be used by security experts and non-experts alike to create more secure applications.”
Developers not using Visual Studio can still tap into Microsoft’s SDL technologies by downloading the freely available informational paper, SDL Documentation version 4.1. This paper reflects Microsoft’s own internal security and privacy processes and now includes new guidance on online services and line of business applications.
Visit the Microsoft Subnet web site for more news, blogs, podcasts. Subscribe to all Microsoft Subnet bloggers. Sign up for the bi-weekly Microsoft newsletter. (Click on News/Microsoft News Alert.)
Microsoft to show off “Kumo” and offer more ad-supported cloud servicesMicrosoft demos SecondLight 3D UI with its next-gen SurfaceMicrosoft Early Releases Prove Useful to Malware Creators TooPowerShell Summer Scripting Games 2009 (Announced)Windows 7 and WS2008 R2 ship date: holiday ’09CIOs seem to love VMware over Hyper-VUsing offshore certified Microsoft partners? Beware of security holes12 killer freebie SharePoint add-ons Follow Microsoft Subnet on Twitter
