Secure Software Development Framework: Towards an SDL for all SDLCs

on YouTube ↗38m

" summary

Describes the Secure Software Development Framework (SSDF), an SDLC-agnostic SDL designed to work with Waterfall, Iterative, and Continuous Deployment workflows. Explains how SSDF embeds secure architecture, design, development and validation activities while reducing redundancy and clarifying requirements so developers and architects can adopt security practices across varied development methodologies.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 6:20The Pains of The SDL OUCH
3. 11:07SSDF: Building an SDLC agnostic SDL
4. 22:10SSDF Solutions to SDL Pain Points
5. 28:05Any Questions?

" related talks

• 20mSecure Software Development LifecycleJim Manico · dotSecurity 2017
• 41mImplementing SDLC in Combat ConditionsEgor Karbutov · РИТ++ 2017
• 38mElectrons to Clouds—One SDL to Rule the World from Hardware to the CloudMohit Arora, Richard Tonry · RSAC 2022
• 26mSimple Guide to Secure SDLCAudrey Nahrvar · NDC Oslo 2018
• 22mBuilding SSDLC in an Enterprise EnvironmentAlen Adanic · Shift 2025
• 48mDesigning a Secure Software Development Lifecycle with DevOpsMike Long · NDC Security Oslo 2020
• 29mGoogle SLSA & NIST SSDF: Emerging Software Supply Chain Security Best PracticesTony Loehr · SupplyChainSecurityCon at Open Source Summit North America 2022
• 27mSecurity by DesignMaximiliano Alonzo · Nerdearla Mexico 2024