Threat-Driven Software Development: Inside Microsoft’s Secure Future Initiative, 1st edition

Part 1 When Software Meets the Real World

Ch 1 Understanding the Threat Landscape

Ch 2 Security Is More Than One Team

Ch 3 Why Microsoft Adopted SFI

Ch 4 How Operational Security is Different

Ch 5 Understanding the Terrain

Ch 6 Controlling the Terrain

Part 2 The Role of AI in Security

Ch 7 AI Security Backgrounder

Ch 8 How Threat Actors Use AI

Ch 9 Defensive AI

Ch 10 Security Engineering with AI

Part 3 Threats to Systems

Ch 11 Build and Engineering Systems

Ch 12 Identities and Secrets

Ch 13 Production Tenants and Systems

Ch 14 Production Networks

Ch 15 Monitoring, Detecting, and Alerting

Ch 16 Response and Remediation

Ch 17 Product Security

Part 4 Learning from SFI An Implementation Playbook

Ch 18 Crawl, Walk, Run: How to add Security Discipline

Ch 19 Tracking and Quantifying Risk

Ch 20 Reducing Risk

Ch 21 Getting Ahead of Security Vulnerabilities 

Part 5 Some Final Thoughts

Ch 22 Rethinking the Role of C and C++

Ch 23 Are We More Secure Today?