Home > Resources > books > Howard-Lipner-Security-Development-Lifecycle

The Security Development Lifecycle

Last modified: 2026-10-23

URL: https://www.microsoftpressstore.com/store/security-development-lifecycle-9780735622142

Summary

Michael Howard and Steve Lipner's book (Microsoft Press, 2006) describing Microsoft's Security Development Lifecycle (SDL): security requirements, threat modeling, secure coding, testing and response processes for building demonstrably more secure software. Cited in the e-ID taxonomy as background for security engineering processes that a national e-ID and its wallet/verifier software should follow.