diff options
| -rw-r--r-- | synopsis.pdf | bin | 166149 -> 167583 bytes | |||
| -rw-r--r-- | synopsis.tex | 68 |
2 files changed, 52 insertions, 16 deletions
diff --git a/synopsis.pdf b/synopsis.pdf Binary files differindex 361b3f0..25d6747 100644 --- a/synopsis.pdf +++ b/synopsis.pdf diff --git a/synopsis.tex b/synopsis.tex index 845173e..d7b7776 100644 --- a/synopsis.tex +++ b/synopsis.tex @@ -521,11 +521,43 @@ principles: \end{itemize} Microsoft created software development process which follows these principles, -Security Development Lifecycle (SDL). It consists of 16 practices, split into 6 -phases. These activities include: security training, setting requirements and -minimal levels of security, risks assessment, designing secure functionality and -security functions, safe implementation, analysis, testing of the produced -application, creating emergency plan and final review. +Security Development Lifecycle (SDL). It is used throughout the whole company +and is mandatory policy since 2004. Its goal is to reduce the number and +severity of security vulnerabilities present in software by combining a holistic +and practical approach. + +SDL consists of five main phases: + +\begin{itemize} |