This latest release from Microsoft is REALLY interesting since it should allow for a more intuitive and practical implementation of security activities on an applications SDL.
http://blogs.msdn.com/sdl/archive/2009/05/19/making-secure-code-easier.aspx
I need to try to apply this to O2 and see how practical it is.
Now, what I would to know, is which Microsoft applications have been developed using these templates? and will Microsoft publish the data created by those teams?
