Security

Learn all about the Windows 8 security investiments and how you can prepare to secure your systems for Windows 8. 

Mark Miller is the main designer of the E and Caja object-capability programming languages, inventor of Miller Columns, a pioneer of agoric (market-based secure distributed) computing, an architect of the Xanadu hypertext publishing system, and a representative to the EcmaScript committee. He's…

Drawbridge is a research prototype of a new form of virtualization for application sandboxing. Drawbridge combines two core technologies: First, a picoprocess, which is a process-based isolation container with a minimal kernel API surface. Second, a library OS, which is a version of Windows…

Its IT Time and in today’s episode, Blain Barton and John Baker welcome Curtis Parker from the Forefront Online Protection team. Tune in as Curtis gives us a tour of Forefront’s new features for Exchange, as he explains how Office 365 customers can simplify the management and security experience…

Technology is constantly changing. A few years ago, social media was used by a small select few and cloud computing was on the distant horizon. IT departments had enough to worry when it came to security with firewall breaches, phishing schemes and ensuring their in-house applications and company…

In this video, Guido de Caso talks about Distributed Knowledge Authorization Language (DKAL). Guido finished his internship at the Research in Software Engineering group (RiSE) under the mentoring of Yuri Gurevich, a Principal Researcher at Microsoft Research. DKAL home pageDKAL on…

Many of you use Sysinternals tools to help you manage computing responsibilities ranging from monitoring/understanding process activity with Process Explorer to debugging Win32 code with DebugView. With over 70 utilities to choose from, Sysinternals tools cover a wide swath of…

Learn real world tips for configuring SharePoint claims based security from Altaf Gilani and Mark Massad. In this episode, we discuss how to implement claims based security in SharePoint, including lessons learned and general guidance. Altaf and Mark also give some valuable instrumentation and…

What happens to a Workflow if an attacker can lure the workflow host into running XAML which references an assembly replaced by the attacker?  This is what I call an Activity Assembly Spoofing attack.  On this episode I'll show you how it can happen, what you need to know about the…

Web applications increasingly integrate third-party services. The integration introduces new security challenges due to the complexity for an application to coordinate its internal states with those of the component services and the web client across the Internet. In this paper, we study the…