Security Briefs: Threat Models Improve Your Security Process

It’s helpful to think about secure design from a more holistic perspective by using threat models to drive your security engineering process.

In the November 2008 issue of MSDN Magazine, Michael Howard proposes using the threat model to help drive other SDL security requirements, primarily code review priority, fuzz testing priority, and attack surface reduction.

You can also check out other security topics covered in MSDN Magazine in our online archives.