Shostack + Friends Blog Archive


SDL Press Tour Announcements

Steve Lipner and I were on the road for a press tour last week. In our work blog, he writes [link to no longer works]:

Last week I participated in a “press tour” talking to press and analysts about the evolution of the SDL. Most of our past discussions with press and analysts have centered on folks who follow security, but this time we also spoke with publications and analysts who write for software development organizations. I was struck by the extent to which the folks who focus on development have been grappling with many of the issues about developing secure software that we’ve focused on here at Microsoft.

The announcements are here [link to no longer works]. I am particularly excited about the third announcement, the availability of the SDL Threat Modeling Tool v3.