Michael Howard
Author of Writing Secure Code
The book and the process behind Microsoft’s security turnaround
Rating
87Impact score
Domains
Secure developmentSDLThreat modelling
Scouting report
Co-wrote Writing Secure Code, which Bill Gates ordered Windows engineers to read during the 2002 Trustworthy Computing halt, and helped build the Security Development Lifecycle that came out of it — threat modelling, banned APIs, fuzzing and a final security review before ship. The SDL became the template most large software organisations copied.
Curator’s note
Turned “be careful” into a checklist an entire company could be held to.
Sources
- 01Microsoft Security Development Lifecycle en.wikipedia.org
- 02Writing Secure Code, second edition microsoftpressstore.com