Consciere Joins the Microsoft Security Development Lifecycle (SDL) Pro Network

Consciere is excited to announce our membership in the Microsoft Security Development Lifecycle (SDL) Pro Network. The SDL Pro Network is a group of security consultants, training companies, and tool providers that specialize in application security and have substantial experience and expertise with the methodology and technologies of the SDL. The Security Development Lifecycle (SDL) is the industry-leading software security assurance process created by Microsoft and proven effective since 2004. For more information on the SDL, please visit www.microsoft.com/sdl.

Consciere principals have been a pioneers in application security assessment and design since 1999, including projects related to operating systems, productivity suites, commercial web servers, software development frameworks, Internet authentication and identity services, security software and communications protocols, databases, Digital/Information Rights Management (D/IRM) technology, and email servers and clients. Examples of our recent application security work can be found on our Case Studies page.

Consciere’s application security assessment and testing services adapt the core tenets of SDL, including:

  • Training, Policy and Organizational Capabilities, including security training and advice on how to implement the SDL
  • Requirements and Design, including risk analysis, functional requirements and threat modeling
  • Implementation, including use of banned APIs, code analysis and code review
  • Verification, including fuzzing and Web application scanning
  • Release and Response, including final security review (FSR), penetration testing, and response planning and execution
  • Infrastructure Assessment for “cloud” or hosted software services, including security assessment of supporting IT infrastructure and analysis of key application integration points

Contact Us for more information about our application security services, and start putting our proven track record to work for you today.