Microsoft Security Development Lifecycle (SDL) إعلان

• ارتباط
  Workaround for MSF-Agile+SDL v5.0 install error
  SDL Team 22/رجب/1432 07:05 م

  Announcement originially posted Tuesday, August 03, 2010 9:59 PM

  Hi everyone,

  We've talked with some people experiencing problems when trying to install the MSF-Agile+SDL v5.0 process template. We believe these problems are a result of an incompatibility with certain configurations of Sharepoint, and we are working to correct the issue for the next release of the MSF-Agile+SDL template. In the meantime, you should be able to work around the problem by following these instructions to disable the Sharepoint features of the template:

  1. Uninstall the template if you've already installed it.
  2. Reinstall the template files, and uncheck the Additional Sharepoint Components feature during the installation process.
  3. Using your XML editor of choice, open the file <template install dir>\Process Template\Windows SharePoint Services\wsstasks.xml.
  4. Near the bottom of the file, you will see the lines:

  <!--TfsDashboardSDLAgile -->

  <feature featureId="3F6F501A-5DFF-4359-8ED8-232784DFF47E" />

  5. Comment out the second line, ie:

  <!--TfsDashboardSDLAgile -->

  <!-- <feature featureId="3F6F501A-5DFF-4359-8ED8-232784DFF47E" /> -->

  6. Save the file and close

  7. Open the Process Template Manager in Visual Studio

  8. Delete the existing "MSF for Agile Software Development plus Security Development Lifecycle (SDL) v5.0" process template.

  9. Upload the process template again, browse for <template install dir>\Process Template\process template.xml.

  10. Close the Process Template Manager.

  You should now be able to create MSF-A+SDL projects. If you're experiencing the install bug, please let us know if this helps workaround the problem (or if it doesn't).

  Thanks,

  Bryan

• ارتباط
  Announcing the templates for SDL Practices
  SDL Team 25/جمادى الأولى/1432 05:46 م

  Download the templates for SDL practices, a library of templates to help you get started with the more thought-based SDL practices or activities: Defining Security Requirements, Creating a Security Bug Bar, Performing a Security Risk Assessment, Conducting a basic threat model, Managing SDL Exception Requests, Performing a Final Security Review.

• ارتباط
  Tools updates: SDL Threat Modeling Tool, MiniFuzz File Fuzzer, SDL Regex Fuzzer
  SDL Team 18/شوال/1432 10:37 م

  The SDL team has recently announced updated versions of three SDL tools:

  SDL Threat Modeling Tool v3.1.8

  MiniFuzz File Fuzzer v1.5.5

  SDL Regex Fuzzer v1.1.0

  Check them out and feel free to provide comments and feedback.

• ارتباط
  Announcing SDL Process Guidance Version 5.2
  SDL Team 02/رجب/1433 09:10 م

  The annual update to the Microsoft Security Development Lifecycle Process Guidance has been released. Version 5.2 is now available for download (.docx format) as well as online in the MSDN Library.

• ارتباط
  Follow @MSFTsdl on Twitter
  SDL Team 22/رجب/1432 07:12 م

  Follow @MSFTsdl on Twitter to stay informed about the latest news, events and releases of the Microsoft Security Development Lifecycle.