14 DAY TRIAL // The final version of the MSF-Agile plus Security Development Lifecycle Process Template for Visual Studio 2010 is now available for download from Microsoft. Developers have already been able to take advantage of the SDL process template for Visual Studio from the Redmond company, with a Beta release of MSF-A+SDL designed to be run in conjunction with VS2008. Earlier this week, MSF-A+SDL for Visual Studio 2010 was wrapped up and went live on the Microsoft Download Center.
The MSF-A+SDL download essentially brings to the table a Team Foundation Server process template containing the SDL for Agile process guidance built into the MSF Agile development framework, as per the software giant. According to Bryan Sullivan, security product manager SDL team, developers currently leveraging the MSF-Agile+SDL template for TFS 2008 or the MSF for Agile Software Development template included with TFS will have no problems adapting to the latest release.
Sullivan revealed that, “The new 2010 template retains all of the features of the 2008 template, including:
“• An SDL Task work item type that represents SDL requirements and recommendations; • Automatic generation of new SDL Tasks whenever new iterations are added to the project or new code is checked into the source control repository; • A modified Bug work item type that includes reportable fields for security cause and effect; • Check-in policies that inspect for SDL security policy violations when users try to check in code changes; • An integrated process exception workflow, to help ensure that product stakeholders are aware of potential security risks; • Integration with the existing set of SDL tools including the SDL Threat Modeling Tool, BinScope and Minifuzz.”
At the same time, there are also new features introduced in the latest release of the template. In this regard, Sullivan revealed that devs would be able to leverage:
“• A Security dashboard that gives users an at-a-glance summary of the current security development state of their projects; • A Bugs-By-Origin chart to analyze effectiveness and ROI of your organization’s security tools; • An integrated security bugbar (like the one described in the March MSDN Magazine Security Brief) to help non-security expert users correctly triage security bugs.”
MSF-Agile plus Security Development Lifecycle Process Template for VS 2010 is available for download here.
Visual Studio 2010 Premium is available for download here.
Visual Studio 2010 Professional is available for download here.
Visual Studio 2010 Ultimate is available for download here.
Visual Studio Test Professional 2010 is available for download here.
.NET Framework 4 RTM is available for download here.