![]() SDL Threat Modeling Tool 3.1 went live on the Microsoft Download Center on November 6, 2008, carrying the Beta label. The tool has been used extensively within Microsoft,” revealed Steve Lipner, senior director of security engineering strategy in Microsoft’s Trustworthy Computing Group back in September. “This tool allows for structured analysis, tracking and mitigation of potential security and privacy issues, based on a methodology that any software architect can lead effectively. As an integral part of the initiative, Microsoft pointed developers to the SDL Pro Network, the SDL Optimization Model and the Microsoft SDL Threat Modeling Tool 3.0 as resources necessary to increase the security of their software products. In September 2008, Microsoft announced that it planned to share not only its secure development practices but also the tools it was deploying in order to increase the level of protection for customers with developers industry wide. ![]() Microsoft has made the internal security tool that helped bulletproof the Windows operating system available as a free download.
0 Comments
Leave a Reply. |