Security by Design

The WCF Security Guide contains proven practices for building more secure distributed applications with WCF (Windows Communication Foundation). The guide includes end-to-end application scenarios, guidelines, question & answers, videos and task-based how-to articles. Parts of the guide are still in process. It’s open to your review and input.

Microsoft Threat Analysis & Modeling tool allows non-security subject matter experts to enter already known information including business requirements and application architecture which is then used to produce a feature-rich threat model. Along with automatically identifying threats, the tool can produce valuable security artifacts.

The Trustworthy Computing Security Development Lifecycle (or SDL), a process that Microsoft has adopted for the development of software that needs to withstand malicious attack. The process encompasses the addition of a series of security-focused activities and deliverables to each of the phases of Microsoft's software development process.