Brian Johnson works with BizSpark Startups on the East Coast of the United States. For more information about the BizSpark program you can go to http://bizspark.com.
The Antivirus Defense-in-Depth Guide
The information presented in the Antivirus Defense-in-Depth guide has been updated to reflect the security improvements provided as part of Windows XP Service Pack 2. A number of the features in Windows XP Service Pack 2 have made it more difficult for malware to attack a Windows XP based computer. The updates to this guide are designed to ensure these enhancements are identified and explained.
The Security Risk Management Guide
Customers can be overwhelmed when attempting to put in place a plan for security risk management. This can be because they do not have the in-house expertise, budget resources, or guidelines to outsource. To assist these customers, the Microsoft has developed The Security Risk Management Guide.
This guide helps customers of all types plan, build, and maintain a successful security risk management program. In a four phase process, depicted below, the guide explains how to conduct each phase of a risk management program and how to build an ongoing process to measure and drive security risks to an acceptable level.
Privacy: What Developers and IT Professionals Should Know
In this new book, Microsoft privacy expert J.C. Cannon covers the technical and organization facets of protecting customer privacy J.C shows you how to systematically build privacy into any application, Web site, or enterprise system.
High Performance Computing for Windows Server 2003
Some of the toughest computing challenges in the world are tackled and often solved by using high performance computing (HPC) clusters. Companies can now deploy clusters of servers running Windows Server 2003 to benefit from supercomputing power at a fraction of the cost. This site discusses Microsoft HPC solutions and demonstrates how Windows Server 2003 is the premier platform for customers seeking performance, scalability, and reliability.
What You Should Know About a Reported Vulnerability in Microsoft ASP.NET
Microsoft is currently investigating a reported vulnerability in Microsoft ASP.NET. An attacker can send specially crafted requests to the server and view secured content without providing the proper credentials. This reported vulnerability exists in ASP.NET and does not affect ASP.
DirectX 9.0 SDK Update - (October 2004)Download the complete DirectX 9.0 SDK - (October 2004), which contains the DirectX 9.0c Runtime and all DirectX software required to create DirectX 9.0 compliant applications in C/C++, and C#.
If you haven't played with DirectX SDK before, this weekend might be a good time to download it and give it a shot. Be sure to check out the Microsoft DirectX 9.0 SDK Update item that gets added to your All Programs menu in Windows. There's a DirectX Sample Browser that lets you sort the samples available, and it even copies individual projects that you might want to start with to your Visual Studio Projects folder. You can find more DirectX information on MSDN here.
Update: Mitch Walker has more information about the changes here.
Update: Chat is over, thanks everyone for coming. That was fun. Next chat is November 18th.
Update: This chat is happeing now. Click here to enter. (I'll pull this post off the security feed when the chat is finished.)
There's a chat tomorrow (Thursday) at 2:00 PST around Security in Microsoft Products. Here's a link to the chat page with more information. You can add this chat to your Outlook calendar by clicking here
Microsoft Security Chat SeriesJoin Mike Nash, Vice President for the Microsoft Security Business Unit, and his team of security experts each month. Microsoft is working hard to improve security and Mike and his team invite you to join them in a candid Q&A session. Ask us your tough questions; share with us what is going well and what needs improvement. This is your chance to talk up front with the leading security minds at Microsoft.
Schneier on Security
A weblog covering security and security technology.