Security

As Web applications move beyond simple HTML forms and postbacks, developers must have an effecting testing strategy to address the new capabilities. In this episode of geekSpeak, author Jeff McWherter discusses the importance of testing Web applications, and he shares strategies for testing key…

The Microsoft Security Development Lifecycle (SDL) is the software development security assurance process used at Microsoft. With the release of the Simplified Implementation of the Microsoft SDL guidance paper, the Microsoft SDL team provides guidance to organizations on the core elements and…

Dr. Cormac Herley spends most of his time thinking about why and how computer users reject security advice (from both fellow humans and software security warning prompts). Recently, his paper, "So Long, and No Thanks for the Externalities: the Rational Rejection of Security Advice by…

Following up on our last intro video for Microsoft's SDL Process Template, Bryan Sullivan joins us to talk about MSF Agile+SDL, which adds security practices to Team Foundation Server. MSF-A+SDL is a TFS process template that provides Security Development Lifecycle (SDL) guidance into…

You may know him as Mr. How Do I with Microsoft ASP.NET. For the last few years Joe has been busy working with the ASP.NET product team to simplify and educate developers on what's possible with the latest web tools. We talk with Joe about how the web developer is able to learn about and leverage…

In this geekSpeak, Microsoft Most Valuable Professional (MVP) Andy Leonard discusses best practices for using Microsoft SQL Server Integration Services (SSIS) in the enterprise. Andy explains what SSIS does well and doesn't do well and describes common struggles when learning SSIS (expressions,…

Pete LePage works as a PM on the Internet Explorer team working with developer security. He stopped by the studio today to give us some tips as surfers, as well as a few tips for developers, on some of the things that can help prevent security threats. In 2008 a study showed that about…

Anil Revuru (RV) from Microsoft Information Security, gives a demonstration of the new version of CAT.NET (Code Analysis Tool for .NET) version 2.0.  It is a static analysis tool that uses the Phoenix Compiler and its data flow graph. Anil walks us through the dataflow rules and how it…

In this Microsoft Online Services executive video, we meet Steven Cloherty, Senior Director of Risk Management for Microsoft Online Services.  Steven runs our risk management team which includes security, privacy, business continuity, and regulatory compliance teams. He and his teams make…

45 weeks and going strong...Laura & Paul bring you the hottest stories that Microsoft had to offer:Helping HaitiXbox wants to take over your living roomLive streaming sports!!Bing and purge...more help for Haiti