Inside the Windows security push
Michael Howard, S. Lipner · IEEE Security & Privacy · 2003
The Microsoft Windows development team spent two months in 2002 analyzing product design, code, and documentation to fix security issues. The results of this security push include a new process and several lessons learned for future projects.