Friday, February 20, 2009 10:07 AM
Akshay Aggarwal
Baking Security In: A Comic Strip View of SDL
So how do you t
ake your average developer who scoffs at security
from the careless and brash aka Kevin, to the poster child for good development practices aka Kevlarr. Well, the Microsoft SDL team has the answer for you. The team recently started publishing a series of web comics detailing the travails of the dev team at Contoso who are under attack from the League of Malware. Along the way they battle with foes such as Spam Bot and Social Engineer while getting help from Vigil and Nforcer. Strip 11 of this interesting attempt to socialize security is below:

Socializing security is essential for organizations to drive culture change from FUD to an understanding of security needs. People are most complex part of the security puzzle. Most people take the easy way out and will avoid the things they fear or don’t understand.
- Akshay