About this episode

The episode discusses the book 'Threat-Driven Software Development' and how to build resilient systems against modern threats.

In this episode of the Microsoft Threat Intelligence Podcast, host⁠ ⁠⁠Sherrod DeGrippo is joined by co-authors Michael Howard, Lee Holmes, and Shawn Hernan for a discussion on their new book, Threat-Driven Software Development: Defending Online Services from Modern Threat Actors.   Together, they explore how security teams and software developers can build more resilient systems by understanding how real-world threat actors operate. From threat modeling and operational security to the evolving role of AI in both cyber defense and cybercrime, the conversation examines lessons learned from major security incidents and why secure design must be a priority from the earliest stages of software development.  In this episode you’ll learn:       Why security should be driven by real-world threat actor behavior  How developers can reduce risk through better design and operational practices  The role of threat modeling in modern software development  Some questions we ask:      How did the idea for Threat-Driven Software Development come about?  Why is operational security just as important as…

More episodes of Microsoft Threat Intelligence Podcast

• Casey Ellis on How AI Is Reshaping Vulnerability Research and Patching · July 1, 2026 · 1h 3m
• Hot Cybercrime Summer:  Smishing, Supply Chains, and Sleuthcon · June 17, 2026 · 40 min

Explore listener stats, chart rankings, contacts and more on the Microsoft Threat Intelligence Podcast podcast page.