Clip 1/4 Speaker: Steve Lipner Senior Director of Security Engineering Strategy, Trustworthy Computing Security, Microsoft Corporation. Co-author of "The Security Development Lifecycle", Microsoft Press This keynote will review the evolution of the Security Development Lifecycle (SDL) from its origins in the Microsoft "security pushes" of 2002-3 through its current status and application in 2010. It will emphasize the aspects of change and change management as the SDL and its user community have matured and grown and will conclude with a summary of some recent changes and additions to the SDL. Specific topics to be addressed include: * Motivations for introducing both the SDL and its predecessor processes. * Considerations in selling the process to management and sustaining a mandate over a prolonged period. * Scaling the SDL to an organization with tens of thousands of engineers. * Managing change. * The role of automation in the SDL. * Adaptation of the SDL to agile development processes. * Thoughts for organizations that are considering implementing the SDL. The presentation will cover technical aspects of the SDL including a brief review of requirements and tools, and results. For more information click here (bit.ly