Microsoft Security Development Lifecycle (SDL)

A forum for discussing the Microsoft SDL Process and guidance. 

• 28067
  

  Mitigation required to unauthenticated data stream

  
  TicArch 12 Temmuz 2009 Pazar 12:57
  Son Yanıt TicArch 13 Temmuz 2009 Pazartesi 05:07
 
• 18281
  

  Stronger algorithm for generating hash

  
  TicArch 30 Haziran 2009 Salı 11:55
  Son Yanıt Dana Epp [Security MVP]MVP12 Temmuz 2009 Pazar 17:28
 
• 17895
  

  missing .net administrative tool

  
  Mehmood Ahmed 12 Temmuz 2009 Pazar 04:34
  Son Yanıt Dana Epp [Security MVP]MVP12 Temmuz 2009 Pazar 17:14
 
• 410207
  

  Thesis about Threat Modeling

  
  Gus G 09 Haziran 2009 Salı 21:07
  Son Yanıt Gus G 06 Temmuz 2009 Pazartesi 20:38
 
• 18735
  

  security design checklist

  
  TicArch 05 Haziran 2009 Cuma 13:23
  Son Yanıt Adam ShostackMicrosoft Employee15 Haziran 2009 Pazartesi 18:34
 
• 29051
  

  Interested in learning more about threat modeling and the SDL process? Please read this.

  
  Dana Epp [Security MVP]MVP26 Mayıs 2009 Salı 21:12
  Son Yanıt Rheyc 11 Haziran 2009 Perşembe 22:31
 
• 110479
  

  Running a Process before login into the system

  
  Ezhillmaran 03 Haziran 2009 Çarşamba 05:26
  Son Yanıt Dana Epp [Security MVP]MVP03 Haziran 2009 Çarşamba 06:03
 
• 17331
  

  Regarding the identity in sqlserver

  
  anjigvr 02 Haziran 2009 Salı 05:10
  Son Yanıt Dana Epp [Security MVP]MVP02 Haziran 2009 Salı 15:45
 
• 16901
  

  Information disclosure- Accessing external system without storing their userID/password

  
  TicArch 28 Mayıs 2009 Perşembe 06:30
  Son Yanıt Dana Epp [Security MVP]MVP28 Mayıs 2009 Perşembe 15:51
 
• 47762
  

  Security API Function CertCreateSelfSignedCertificate Cannot be Used to Create A Valid SSL Certificate (per the likes of SelfSSL)

  
  CVanHyn 26 Mayıs 2009 Salı 17:53
  Son Yanıt CVanHyn 27 Mayıs 2009 Çarşamba 17:47
 
• 17273
  

  How to use Win32_Tpm class method?

  
  Stanly Hwang 27 Mayıs 2009 Çarşamba 03:00
  Son Yanıt Dana Epp [Security MVP]MVP27 Mayıs 2009 Çarşamba 16:14
 
• 18354
  

  doing risk assessment and DREAD rating in threat modeling tool

  
  Bhaskar Sharma 27 Mayıs 2009 Çarşamba 13:29
  Son Yanıt Dana Epp [Security MVP]MVP27 Mayıs 2009 Çarşamba 16:11
 
• 89057
  

  Differences between Threat Model Tool v.2.1 and v.3 beta and related approaches

  
  Marco Vallini 25 Mart 2009 Çarşamba 09:02
  Son Yanıt Dana Epp [Security MVP]MVP27 Mayıs 2009 Çarşamba 16:00
 
• 17135
  

  Problem in decrypting data with expired certificate using Capicom

  
  AnitaVenkatesh 21 Mayıs 2009 Perşembe 05:47
  Son Yanıt Dana Epp [Security MVP]MVP22 Mayıs 2009 Cuma 17:01
 
• 29765
  

  Risk Rating/Ranking

  
  Rheyc 07 Nisan 2009 Salı 22:45
  Son Yanıt Rheyc 01 Mayıs 2009 Cuma 20:42
 
• 17119
  

  Sybase EA Server Stack-Based Overflow

  
  Peter Isaac 15 Nisan 2009 Çarşamba 22:48
  Son Yanıt Dana Epp [Security MVP]MVP16 Nisan 2009 Perşembe 15:35
 
• 07519
  

  Want to explore your threat models with the SDL TM tool? Come have Coffee and Code with me tomorrow

  
  Dana Epp [Security MVP]MVP07 Nisan 2009 Salı 17:37
 
• 37710
  

  Analyze Model

  
  Rheyc 30 Mart 2009 Pazartesi 16:42
  Son Yanıt Dana Epp [Security MVP]MVP31 Mart 2009 Salı 16:49
 
• 47490
  

  Would love input on a suggestion for a future release

  
  Dana Epp [Security MVP]MVP05 Mart 2009 Perşembe 06:51
  Son Yanıt Dana Epp [Security MVP]MVP31 Mart 2009 Salı 16:48
 
• 16328
  

  tool for configuration checking.

  
  Secarch 30 Mart 2009 Pazartesi 13:10
  Son Yanıt Dana Epp [Security MVP]MVP30 Mart 2009 Pazartesi 20:22