Behind the Book: Threat-Driven Software Development

In this episode of the Microsoft Threat Intelligence Podcast, host⁠ ⁠⁠Sherrod DeGrippo is joined by co-authors Michael Howard, Lee Holmes, and Shawn Hernan for a discussion on their new book, Threat-Driven Software Development: Defending Online Services from Modern Threat Actors.   Together, they explore how security teams and software developers can build more resilient systems by understanding how real-world threat actors operate. From threat modeling and operational security to the evolving role of AI in both cyber defense and cybercrime, the conversation examines lessons learned from major security incidents and why secure design must be a priority from the earliest stages of software development.  In this episode you’ll learn:       Why security should be driven by real-world threat actor behavior  How developers can reduce risk through better design and operational practices  The role of threat modeling in modern software development  Some questions we ask:      How did the idea for Threat-Driven Software Development come about?  Why is operational security just as important as application security?  What do you hope readers take away from this book?  Resources:   View Lee Holmes on LinkedIn   View Michael Howard on LinkedIn   View Shawn Hernan on LinkedIn   View Sherrod DeGrippo on LinkedIn     Related Microsoft Podcasts:                    The BlueHat Podcast  Uncovering Hidden Risks      Discover and follow other Microsoft podcasts at microsoft.com/podcasts     Get the latest threat intelligence insights and guidance at Microsoft Security Insider    The Microsoft Threat Intelligence Podcast is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.