Security Start to Finish: Meet the Microsoft Security Development Life

How Redmond got serious about baking security into Windows 7. "...The company has been remarkably open about the mechanics of the process, which it describes as “non-proprietary” information. To that end, the SDL process guidance, updated regularly, is available online. What Ladd describes as “a slew” of SDL tools are also freely available for download...."