In early dented step of stopping the develop ment work of some 8,500 Windows engineers while the company conduct ed 10 weeks of intensive security training, analyzed the Windows code base, and instituted a threat-modeling process that taught program manag ers, architects, and testers to think like software attackers.