The Security Development Lifecycle

SDL: A Process for Developing Demonstrably More Secure Software

by Michael Howard, Steve Lipner