Security

Maqbool Malik and Anil Revuru (RV), from Microsoft Information Security, talk about the newly designed version of CAT.NET which will be part of the Assessment & Protection (A&P) suite.CAT.NET is a static analysis tool on Visual Studio that helps find vulnerabilities like…

Juan Chen and Nikhil Swamy, two researchers at the Research in Software Engineering group, present FINE, a new programming language for .NET.Software systems are governed by increasingly complex security policies. Ensuring that a system properly enforces its policy is hard. FINE is a…

This screencast shows how AppFabric Access Control (AC) can be used to provide identity federation, trust delegation, service authorization and integration with Active Directory Federation Services (ADFS), to control access to services based on Windows Azure. In the demo,…

Anil Revuru (RV), from Microsoft Information Security, walks us through the expansion of what used to be the Anti-XSS Library. This enhanced version of the library will introduce mitigation to other attacks like: SQL Injection Cross-Site Request Forgery (CSRF) Setting…

Anil Revuru (RV), from Microsoft Information Security, walks us through a configuration verification tool that will be part of a suite of tools that will help you assess your code as well as protect it. For more info watch the Assessment & Protection (A&P) Suite video.WACA is…

Anil Revuru (RV), from Microsoft Information Security, introduces a configuration verification tool that will be part of a suite of tools that will help you assess your code as well as protect it. For more info watch the Assessment & Protection (A&P) Suite video.WACA is designed to…

Anil Revuru (RV) and Mark Curphey, from Microsoft Information Security, introduce what would be in the future a suite of tools that will help you assess your code as well as protect it. This is called the Assessment & Protection (A&P) Suite and it includes the following tools:   Web…

Anil Revuru (RV), from Microsoft Information Security, introduces the expansion of what used to be the Anti-XSS Library. But web vulnerabilities are not only around Cross-Site Scripting (XSS) attacks. This enhanced version of the library will introduce mitigation to other attacks like:  SQL…

The Microsoft Security Development Lifecycle (SDL) team recently released two new security tools, BinScope Binary Analyzer and MiniFuzz File Fuzzer, to help you write more secure code. Jeremy Dallman, Michael Howard, and Ivan Medvedev created these tools so we decided to pay them a visit to…

I had the chance to do an interview with security expert Dominick Baier. I visited Dominick and talked with him about Claims, Windows Identity Foundation and his StarterSTS Project hosted on Codeplex.You can contact Dominick via his blog and you can get more information about the StarterSTS…