Software Development Life Cycle (Stsc) To The Software Development Lifecycle (SDLC)

Hello Dr. Robert Strader,
Based on this week’s discussion which is based on comparing the classic Software development life cycle (SDLC) to the Microsoft's Security Development Lifecycle(SDL). I would want to say that the Software Development Lifecycle is a structure which defines tasks to be performed at each step in the Software Development. And on the other hand, the Security Development Lifecycle(SDL)is a process which helps developers creating software applications to make them more secure and address the security compliance by reducing development cost.
Software and Security:
Without software, a computer would simply be an interesting experiment in an engineering lab. The software gives value to computers by using them to support day-to-day

In the case of web-based applications software, it must include controls to protect the value of the business and its information from the exposure to end users in the outside world. There is this mediation between end users, the valuable data, and the outside world.
Software development life cycle (SDLC):
The process by which the software is conceptualized developed and maintained this process is known as Software Development Lifecycle. There are seven key points to understanding Software Development Lifecycle.
1. Planning: This is the process in which the outline of the project is created and why this software is needed is

One of the most crucial factors that lead to Microsoft creating secure software is the use of the Security Development Lifecycle or SDL. SDL has been used in the development of Windows 7 Microsoft office, windows internet explorer 8, asp.net-mvc, windows server 2008 and many more products so what is SDL. The SDL is a set of processes and tools designed to minimize the number and potential impact of any security vulnerabilities in a software product these processes and tools are used at every stage of the software development lifecycle beginning with security training for all team members.
Requirements phase: The team will identify the key security objectives for the product set the appropriate bug bars that define security and quality for the product lifecycle and perform security and privacy risk assessments.
Design phase: The team will undertake a threat modeling exercise to analyze and document the applications attack