Browse by Tags

• Planning Phase
• Practices
• Security

Threat Model Your Strategic Planning

I am not marketing guy, nor strategic one – I really do not know why I started to read this post - Why strategic planning fails - may be because my RSS reading technique ( How to Use Outlook 2007 RSS To Effectively Aggregate And Distill Information ) Read More...

Posted 23 May 07 01:59 by alikl | 0 Comments   
Filed under Practices, Threat Modeling

Late Threat Modeling

I always suggest conducting Threat Modeling even in advanced dev cycle stages, although it might seem absurd – why would one model threats for something that already has been completed? I often start working with projects that have advanced into their Read More...

Posted 09 May 07 08:35 by alikl | 0 Comments   
Filed under Security, Practices, Threat Modeling

Threat Modeling Big Chunks

When three years ago I started to practice Threat Modeling I thought it is most boring part of security (which itself is not the most fascinating thing to most of people). I hated it since it seemed too boring - interview folks, read tones of specs, and Read More...

Posted 27 April 07 07:34 by alikl | 6 Comments   
Filed under Security, Practices, Planning Phase, Threat Modeling

Search

Go

This Blog

• Home
• Email

Tags

• AJAX
• Auditing and Logging
• Authentication
• Authorization
• CardSpace
• CAS
• Code Inspection
• Deployment Inspection
• Deployment Phase
• Development Phase
• End User
• Exception Handling
• Fuzzing
• IIS 7
• Implementation
• Inception Phase
• Information Gathering
• Input Validation
• Interop
• Operations
• Performance
• Planning Phase
• Practices
• Reflection
• Security
• Sensitive Data
• Test Phase
• Threading
• Threat Modeling
• Tools
• Video
• Vista
• VSTS
• WCF

Archives

• August 2008 (1)
• July 2008 (7)
• June 2008 (5)
• May 2008 (4)
• April 2008 (4)
• March 2008 (3)
• February 2008 (3)
• January 2008 (10)
• December 2007 (6)
• November 2007 (4)
• October 2007 (11)
• September 2007 (4)
• August 2007 (6)
• July 2007 (8)
• June 2007 (3)
• May 2007 (21)
• April 2007 (25)
• March 2007 (25)

. My Personal Blog .

• Practice This

.Net Performance How To's

• Improving .NET Application Performance and Scalability
• Exceptional Performance
• Performance Testing Guidance How-To's
• Fiddler PowerToy - Part 2: HTTP Performance
• Performance Testing with Fiddler
• Bottleneck-Detection Counters
• Troubleshooting Performance Problems in SQL Server 2005
• Performance Frame - v2

.Net Security How To's

• patterns & practices Security How To's Index
• ASP.NET 2.0 Security Questions and Answers
• Tamper detection
• Authentication Hub
• VSTS Resources
• Architecture and Design checklists
• Securing Sites with IP Address Restrictions
• WCF - XSD validation for WCF services
• WCF - Message Inspectors
• Using Credential Management in Windows XP and Windows Server 2003
• WCF - Common Security Scenarios
• WCF - Authorization
• Validating XML Data with XmlReader
• Input Validation - XML Data
• Validation - Web Client Software Factory
• patterns & practices WCF Security Application Scenarios
• Microsoft Identity and Access Management Series

Design Patterns

• data & object factory
• Yahho Design Pattern Library
• Sample .Net 3.0 app
• Application Architecture for .NET: Designing Applications and Services
• Litware HR - A Multitenant sample application
• Microsoft .NET Pet Shop 4.0
• Responsive Composite Web Client Reference Implementation
• Table of Contents: Introduction to CAB/SCSF
• ASP.NET Quickstarts
• Microsoft Identity and Access Management Series
• Software design patterns

Impactful

• Super Size Me
• Billy Eliot
• The Legend of 1900
• The Terminal
• The Counterfeiters

Lifecycle Phases

• 5. Deployment Phase
• 3. Development Phase
• 4. Test Phase
• 1. Inception Phase
• 2. Planning Phase

Popular

• My Favorite Shortcuts
• My Pipeline Is My Inbox
• Security .Net Code Inspection Using Outlook 2007
• Security Code Inspection - Eternal Search For SQL Injection
• .Net Assembly Spoof Attack
• Code Inspection - First Look For What To Look For
• How To Hack WCF - New Technology, Old Hacking Tricks
• Generate Documents Out Of Mail Items Directly From Outlook 2007
• ARCast With Ron Jacobs - Defending the Application
• How to Use Outlook 2007 RSS To Effectively Aggregate And Distill Information

Tools

• Fiddler2 Web Debugger - Freeware HTTP(S) debugging tool
• Microsoft Network Monitor 3
• FxCop Team Page
• Microsoft Threat Analysis & Modeling
• Windows Sysinternals tools
• Log Parser 2.2
• p&p Practices Checker - performance
• Microsoft ® Windows Server ™ 2003 Performance Advisor
• Ajax View
• WCat 6.3 (x86)
• Funnel Web Analyzer 5.0 for Windows

Syndication

• RSS 2.0
• Atom 1.0