The Microsoft SDL - Developer Starter Kit provides a compliation of baseline developer security training materials on the following core Microsoft Security Development Lifecycle (SDL) topics:
- secure design principles;
- secure implementation principles;
- secure verification principles;
- SQL injection;
- cross-site scripting;
- code analysis;
- banned application programming interfaces (APIs);
- buffer overflows;
- source code annotation language;
- security code review;
- compiler defenses;
- fuzz testing;
- Microsoft SDL threat modeling principles; and
- the Microsoft SDL threat modeling tool.