“MSF-A+SDL is a TFS process template that incorporates SDL for Agile process guidance into MSF Agile development framework. With MSF-A+SDL template, any code checked into Visual Studio Team System source repository by developer is analyzed to ensure that it complies with SDL secure development practices. Template also automatically creates security workflow tracking items for manual SDL processes such as threat modeling to ensure that these important security activities aren’t accidentally skipped or forgotten,” Microsoft writes. According to Bryan Sullivan, security product manager SDL team, developers currently leveraging the MSF-Agile+SDL template for TFS 2008 or the MSF for Agile Software Development template included with TFS will have no problems adapting to latest release.
More Info: Download