Q&A: Don't judge Microsoft security by the number of Patch Tuesday bulletins - Network World

“What's the SDL's biggest benefit been for Microsoft? I think the biggest gain has been the reduction in the prevalence of exploitable vulnerabilities [in Microsoft's newer products]. It really is the combination of making the code more secure and making the remaining vulnerabilities harder to exploit because the attack surface has been reduced.”

- Steve Lipner, senior director of security engineering at Microsoft's Trustworthy Computing Group,

Q&A: Don't judge Microsoft security by the number of Patch Tuesday bulletins - Network World