Meeting - 2010-09-13 - Notes

Security Development Life Cycle (SDL)

Bob Ono presented IET Architecture Meeting.ppt, a summary of the information presented at the recent two-day semnar at UC Davis. It included a demonstration Microsoft's SDL threat modeling tool..
The issue of who is responsible for SDL was discussed. In general, it's a project's sponsors; IET doesn't tend to enforce standards when it does work for others.