Microsoft’s formally established its security-enhanced software development
process, the SDL, during its “security pushes” of 2002 [160] as a means of
modifying its traditional software development processes by integrating tasks
and checkpoints expressly intended to improved the security of the software