I'll publish a post soon on Web Service Subscription Models and associated business models that can be realized in web space. I'll be also covering security issues related to variety of architectural patterns to support different subscription models. If you are interested please drop me your comments. Watch this space… ...

Microsoft Threat Analysis & Modeling v2.0 RC1 is out. Tool allows non-security subject matter experts to enter already known information including business requirements and application architecture which is then used to produce a feature-rich threat model....

The Microsoft Shared Computer Toolkit for Windows® XP. Version 1.1 software update is now available. The new version still offers the same powerful software tools for shared computers in classrooms, school computer labs, libraries, and other public places as the previous version, and also includes software updates that resolve a few known issues. ...

First I looked local DIRECTORY to FIND a super market close to my home. I SELECTED Safeway as it is 2 minutes away rather than Sainsbury’s as it is 15 minutes away. This was my logic. It was easy to BIND to Safeway because I already went there a few times. As soon as arriving there, I INVOKED them for steaks......

I am not sure if have seen this before but an excellent article on trustworthy computing. This paper discusses the Trustworthy Computing Security Development Lifecycle (or SDL), a process that Microsoft has adopted for the development of software that needs to withstand malicious attack....

Typosquatting, also called URL hijacking, is a form of cybersquatting which relies on mistakes such as typographical errors made by Internet users when inputting a website address into a web browser. The Strider URL Tracer, available for download, is a tool that reveals these third-party domains and includes a Typo-Patrol feature that generates and scans sites that capitalize on inadvertent URL misspellings, a process known as typo-squatting....

Here is a high level framework I used over the years to propose solutions (RFP) to win contracts and sometimes to deliver the solutions. It is nothing like a formal methods; the main reason for this framework is to design, develop and deploy solutions in a repeatable and consistent way to deliver constant business value. I’d like to share it because I know that there are methodologies which are still at OOD level, just focus on development, or other complicated ones for enterprise architects but it’s always a challenge find some thing in the middle one level higher that SDLC, one level lower then Enterprise Architecture. ...