Wednesday 

Room 1 

10:20 - 11:20 

(UTC+01

Talk (60 min)

25 Years of the Microsoft SDL

What started as somewhat of a skunkworks project at Microsoft, the Microsoft Security Development Lifecycle (SDL) has become one of the influential sets of constantly evolving security disciplines in the industry.

Application Security
Cloud Security
Design
Experience report
Process
Programming
SDLC
Security Tooling

In this session, one of the SDL's founders, Michael Howard, will discuss what worked, what didn't, lessons learned, the role of AI, how the SDL evolves and it's intersection with blue teams, threat intel and the red team, and perhaps even a peek into the future!

Michael Howard

Michael's career at Microsoft spans over 30 years, working exclusively in Security and is currently in the Microsoft Red Team. He is the co-architect of the Microsoft Security Development Lifecycle. His latest book is Designing and Developing Secure Azure Solutions, and he is a co-host of the Azure Security Podcast.