Secure software development practices should be applied as part of the foundation of critical infrastructure systems development to ensure stability and defend against attacks, said Steve Lipner, senior director of security engineering strategy in Microsoft’s Trustworthy Computing Group.
You make your enhancements and apply the SDL to the components you change and over time it gets better.
via Steve Lipner on the Microsoft SDL, critical infrastructure protection.








