Threat-Driven Software Development: Defending Online Services from Modern Threat Actors
暫譯: 威脅驅動的軟體開發：保護線上服務免受現代威脅行為者的攻擊

Michael Howard, Lee Holmes, Sherrod DeGrippo and Shawn Hernan, are recognized leaders in cybersecurity, threat intelligence and software assurance at scale, bringing more than 90 years of combined experience to this book. Michael, a Senior Director on the Red Team at Microsoft and coauthor of multiple security books, has spent decades driving vulnerability research and secure development practices, translating real world attacks into concrete improvements in software design and engineering. He is a co-host of the Azure Security Podcast. Lee is a Partner Security Architect within Azure, driving secure design, architecture, and operational practices across both Azure and Microsoft specialized clouds. Sherrod, Partner GM of Global Threat Intelligence at Microsoft, draws on 21 years across government and the private sector and has been honored as Cybersecurity Woman of the Year (2022); she also hosts the Microsoft Threat Intelligence Podcast. Shawn leads Azure security assurance and variant hunting organization and Azure DevSec, with hands-on expertise spanning security assurance and design, threat modeling, penetration testing, and vulnerability analysis. Together, they distill frontline experience into clear, actionable guidance for defenders and builders alike.

邁克爾·霍華德 (Michael Howard)、李·霍姆斯 (Lee Holmes)、謝羅德·德格里波 (Sherrod DeGrippo) 和 肖恩·赫南 (Shawn Hernan) 是網路安全、威脅情報和大規模軟體保證領域的公認領導者，為本書帶來超過90年的綜合經驗。邁克爾是微軟紅隊的高級總監，也是多本安全書籍的共同作者，數十年來專注於推動漏洞研究和安全開發實踐，將現實世界的攻擊轉化為軟體設計和工程的具體改進。他是 Azure Security Podcast 的共同主持人。李是 Azure 的合作夥伴安全架構師，負責推動 Azure 和微軟專用雲端的安全設計、架構和運營實踐。謝羅德是微軟全球威脅情報的合作夥伴總經理，擁有21年的政府和私營部門經驗，曾獲得2022年網路安全年度女性獎；她還主持微軟威脅情報播客。肖恩負責 Azure 安全保證和變異獵捕組織以及 Azure DevSec，擁有安全保證和設計、威脅建模、滲透測試和漏洞分析的實務專長。他們共同將前線經驗提煉成清晰、可行的指導，供防禦者和建設者參考。