practitionerThreat Modeling
Give developers immediate static-analysis feedback
Said by Steve Lipner ·
“You'd rather have desktop static analysis that reports the errors right then to the developers, and they can fix them as they go”
Transcript evidence from Steve Lipner — The Past, Present, and Future of SDL.