This overview paper presents:
- A brief overview of the Microsoft SDL.
- An overview of the Microsoft SDL Optimization Model with particular attention to where the Microsoft SDL fits within the Optimization Model.
- A discussion of individual Microsoft security development practices, including:
- Roles and responsibilities for individuals involved in the application development process.
- Mandatory security activities.
- Optional security activities.
- The application security verification process.