ENG 192 – Implementing the Agile Microsoft SDL

Course Overview

The standard MS SDL process follows the traditional incremental waterfall model, while Agile methodologies are more iterative. This course focuses on the Agile variation of the SDL process and covers the following topics:

• How to map critical SDL security practices into every-sprint requirements, bucket or periodic requirements, and one-time requirements
• How to incorporate security education, tooling and automation, threat modeling, fuzz testing, handling bug-dense and at-risk code, exceptions, and the final security review into sprints