Those of you that have been reading my blog a while know that part of my interest in security metrics is in trying to find ways to measure if Microsoft efforts to improve fundamental in security products is bearing fruit.  Central to the Microsoft efforts is the Security Development Lifecycle process. One of the cool efforts that has been happening over the past couple of years is that the SDL team ( read their blog! ) has been taking tools and technology that was developed internally to support...