209: Secure Development Lifecycle with Glenn Leifheit

In this episode, Donn talks with Glenn Leifheit from Microsoft about a concept known as "Secure Development Lifecycle". Glenn is a Senior Security Program Manager at Microsoft.
Glenn explains to you what the secure development lifecycle is, how it works and how you can implement something like this in your company. He also shares the top tips you can implement in order to get the quickest benefit of the Secure Development Lifecycle
Links from the show
• Application Inspector: GitHub (github.com/Microsoft/ApplicationInspector)
• DevSkim: GitHub (github.com/microsoft/devskim)
• Attack Surface Analyzer: GitHub (github.com/Microsoft/AttackSurfaceAnalyzer)
• OSS Gadget: GitHub (github.com/typescript-eslint/typescript-eslint)
• Recursive Extractor: GitHub (github.com/microsoft/RecursiveExtractor)
• Microsoft SDL: Microsoft Security Development Lifecycle (microsoft.com/en-us/securityengineering/sdl)
• CodeQL: CodeQL for research | GitHub Security Lab (securitylab.github.com/tools/codeql)
• OWASP: OWASP Foundation | Open Source Foundation for Application Security (owasp.org)
• OWASP Top 10: OWASP Top Ten Web Application Security Risks | OWASP (owasp.org/www-project-top-ten)
• OWASP Web Security Testing Guide: OWASP Web Security Testing Guide (owasp.org/www-project-web-security-testing-guide)
• Python basic code analysis: Pylint - code analysis for Python | www.pylint.org (pylint.org)
• TypeScript basic code analysis: GitHub - typescript-eslint/typescript-eslint: Monorepo for all the tooling which enables ESLint to support TypeScript (github.com/typescript-eslint/typescript-eslint)
Find Glenn online here
• Glenn's LinkedIn (linkedin.com/in/gleifhe)
• Glenn's Twitter (twitter.com/gleifhe)
Donn's Free E-Book on Freelancing
• Free E-Book on Freelancing Rates (donnfelker.com/ebook)
Contact
• @fragmentedcast (twitter.com/fragmentedcast) or our Youtube channel (youtube.com/channel/UC7fT84G-G25w7Bdd-e1rnyw/v…)
• @donnfelker (twitter.com/donnfelker) and instagram.com/donnfelker (on Instagram)
• Freelancing for Mobile Developers (youtube.com/channel/UCX-K1HK8ejnnQF_GWcMHveg) (Donn's YouTube)
• kaushikgopal (youtube.com/user/kequinoxed/videos?view=0&…) (on YouTube) or blog.kaush.co (blog.jkl.gg) or @kaushikgopal (twitter.com/kaushikgopal)
Disclaimer: Many of the links we share to products are affiliate links. They help support the production of Fragmented. Thank you for your support.