SDL in a Zero Trust world
Posted in Security Architecture, Technology on Feb 2nd, 2020
In my first Zero Trust posts last year I wrote that you can never trust any data and that all principles of the Secure Development Lifecycle must be followed. Let me go a bit deeper on that. The classic SDL is about building software without vulnerabilities: training, threat modelling, code review, static analysis, testing and […]