Microsoft expands SDL program

By Robert Westervelt | Feb 8, 2010

0 comments

Facebook

LinkedIn

Digg

Microsoft is broadening its Security Development Lifecycle (SDL) program this week, introducing a new template to help IT organizations and coders enable secure software development, and a new category that identifies tool vendors that support SDL processes.

The new MSF-A+SDL template was designed to introduce Agile development methodologies into Visual Studio IDE. Companies and software developers that use the Agile principles can use the template to support Agile principles for ongoing development projects using the development platform.

Last year's SDL process template focused on waterfall and spiral development methodologies used internally at Microsoft for development on Office, Word and Windows -- projects that typically take years to complete, said David Ladd, principal security program manager for Microsoft.

"The trend over the long haul is pointing toward more rapid application development and Agile development," Ladd said. "In some cases, you may have a Web component where it doesn't make sense to use processes suited for rapid application development, waterfall or spiral."

Specifically, the template addresses projects such as Web applications and Web-based services that have ongoing maintenance and development efforts, said David Ladd of the Microsoft SDL program. When a new iteration is added to a project, the template helps create security tasks within the SDL.

In addition, the Agile template enables the SDL to check Visual Studio projects and website coding within the Agile source control repository. The template will also give the SDL the ability to create new requirements for ongoing projects.

The tool is available in beta, and Ladd said Microsoft would accept feedback and make changes to the process until the full release, which is expected by the end of the second quarter.

0 comments

Facebook

LinkedIn

Digg