Get started with SDL

Question

I believe to get started with SDL you need Team Foundation Server?

Is there anyway to learn/get started with SDL without using TFS (but using Visual Studio 2010 Premium)?

I guess i could install a 30 day trial of TFS but that doesnt give enough time to demo SDL to certain users and meeting existing project requirements.

Thanks

Answer 1

The SDL process consists of 16 security practices executed throughout the software development lifecycle; these 16 security practices can be applied to any platform. We have tools and templates that can integrate with Team Foundation Server (TFS) to assist with the execution of certain SDL practices. However, TFS is definitely not a requirement for getting started or continuing with the SDL.

 

On the following site, you can find a wealth of information about the SDL including an overview as well as details about why and how to adopt:

 

http://www.microsoft.com/security/sdl

 

Feedback on the site contents or follow-up questions are welcome.

Answer 2

Here you'll get a step by step guide on how to start up SDL: http://www.lazyfoo.net/SDL_tutorials/lesson01/index.php