Michael Howard's Web Log

Well, the Professional Developer’s Conference in LA is over (ok, I admit it, I’m late, it finished ages ago) and the Security Symposium we held on the last day was a hit with attendees. I don’t know what experiences you’ve had pulling this kind of thing...

A small company named Wehnus run by Matt Miller has put together a comprehensive Windows Based host-based intrusion prevention system (HIPS) system called WehnTrust ( http://www.wehnus.com ) that uses Address Space Layout Randomization (ASLR) among other...

It's all very well having security tools and technologies within Microsoft, but VS.NET 2005 includes a bunch of these tools we use everday built in. And by built-in, I mean BUILT-IN, as-in, in the UI. No silly command-line settings, you just set the appropriate...

I've been meaning to write about this, but I've been a little busy of late. On day 4 of the PDC (this Friday) we're holding a Security Symposium. The morning is 100% focused on the Security Development Lifecycle (SDL), including threat modeling...