Up to this point, Microsoft has released SDL information using a license that didn’t allow for reproduction, inclusion or transfer without express written consent from Microsoft. Now, Microsoft will be making publicly available “SDL documentation and other SDL process content under a Creative Commons license. Specifically, using the Attribution, Non-Commercial, Share Alike (cc by-nc-sa) terms. By changing the license terms, we’re now allowing people and organizations to copy, distribute and transmit the documentation to others,” stated Microsoft.
The first two documents released under CC are: English versions of “Simplified Implementation of Microsoft SDL” whitepaper and Microsoft Security Development Lifecycle (SDL) – Version 5.0 paper that illustrates how Microsoft applies SDL to own products and services.