{"product_id":"threat-driven-software-development","title":"Threat-Driven Software Development","description":"\u003cp\u003e\u003cstrong\u003eSeasoned security leaders from Microsoft unveil a groundbreaking guide to threat-driven software development for defending online services from modern threat actors \u003c\/strong\u003e\u003c\/p\u003e \u003cp\u003e\u003cem\u003eThreat-Driven Software Development: Defending online services from modern threat actors \u003c\/em\u003eis a practical, field-tested guide authored by Microsoft security leaders Michael Howard, Lee Holmes, Sherrod DeGrippo and Shawn Hernan. Drawing on decades of experience in threat intelligence, red teaming, and secure architecture at scale, the authors describe how to defend against what real adversaries actually do in the field and maps that knowledge through concrete engineering. Grounded in the Microsoft Secure Future Initiative (SFI), and threat intelligence, the book maps attacker behaviors to secure-by-design and secure-by-default principles, identity and secret protection, supply chain and engineering system hardening, isolation, monitoring and detection, and effective red team\/response workflows. The book also shows how AI can be applied defensively; augmenting threat modeling, code review, threat detection and response, while helping software teams use AI to ship faster without compromising security. With concise, accessible chapters; each infused with real-world stories and threat intel, readers learn how to prioritize work against nation-state and criminal tradecraft, shape the defensive battlefield, and strengthen the human element. The result is a hands-on playbook that empowers developers and IT professionals to build resilient online services, measurably reduce risk, and stay ahead of modern threat actors.\u003c\/p\u003e \u003cp\u003e\u003cstrong\u003eAbout This Book\u003c\/strong\u003e\u003c\/p\u003e \u003cul\u003e  \u003cli\u003eFor software developers, security engineers, and technical leaders seeking a concise, threat-driven playbook to design, build, and operate online services that withstand modern threat actors\u003c\/li\u003e  \u003cli\u003eFor DevOps and cloud platform teams, architects, and IT professionals looking to prioritize fixes based on risk, harden supply chains and engineering systems, protect identities and secrets, deploy isolation and monitoring, and leverage AI safely\u003c\/li\u003e \u003c\/ul\u003e \u003cp\u003e\u003cstrong\u003eBy reading this book, you will:\u003c\/strong\u003e\u003c\/p\u003e \u003cul\u003e  \u003cli\u003eLearn how to adapt your systems to support Post Quantum Cryptography\u003c\/li\u003e  \u003cli\u003eLearn how adversaries operate to drive concrete defensive decisions across design, coding, testing, deployment, and operations\u003c\/li\u003e  \u003cli\u003eHarden your software supply chain and engineering systems, and improve open-source dependency hygiene\u003c\/li\u003e  \u003cli\u003eProtect identities and secrets end to end, adopting phishing-resistant multifactor authentication, robust key management, and least-privilege access patterns\u003c\/li\u003e  \u003cli\u003eImplement isolation and network guardrails that limit blast radius, contain lateral movement, and keep critical workloads protected\u003c\/li\u003e  \u003cli\u003eEstablish practical red teaming, incident response, and remediation workflows that create fast feedback loops and measurable risk reduction\u003c\/li\u003e  \u003cli\u003eUnderstand how AI systems are attacked, how adversaries operationalize AI in real campaigns; including how to design, deploy, and defend AI-assisted software safely, as well as how to leverage AI defensively\u003c\/li\u003e \u003c\/ul\u003e","brand":"Gardners","offers":[{"title":"Default Title","offer_id":57495418470773,"sku":"9780135567388","price":44.99,"currency_code":"GBP","in_stock":true}],"url":"https:\/\/backstory.london\/products\/threat-driven-software-development","provider":"Backstory","version":"1.0","type":"link"}