Updated Team System Futures Content on codeplex.com -- Team System 2008 and Beyond

Christian J. Thilmany — Sun, 20 Jul 2008 20:16:00 GMT

Team System 2008 and Beyond (90 Minutes)

Team System 2008 provides allot quality feature improvements over 2005 and with the release of VS 2008 SP1 many more options are now available. Although Rosario is months away we also take a good look at what lies ahead and how Team System will target new roles such as the pure tester as well as the business analyst.

Through slides and demonstrations, this session will provide some of the highlights of those new features in VSTS 2008, SP1, and Rosario using SP1 Beta and CTP12 of Rosario. We will demonstrate the new Test Runner as well as the new Test Case Manager Interface. We will demonstrate historical debugging and even take a look at the facelift that Team Architect has been given.

Go to www.codeplex.com/almspecialisttoolkit for details.

Expression Studio Content to come .......

Third Party Security Code Analysis Options That Compliment VSTS 2008

Christian J. Thilmany — Sat, 12 Jul 2008 05:32:00 GMT

These would be a good compliment to the general security code analysis in Team Developer won't detect denial of service attacks and other more advanced security vunerabilities from the any GUI buffer so I've complied a list of tools that will...

http://www.coverity.com/html/prevent-for-c-c++.html
http://www.fortify.com/products/
http://www.ouncelabs.com/resources/code-analysis-faq.asp
http://www.spydynamics.com/

These tools protect applications (also discussed in Michael Howard’s book) from things like the following:

Unvalidated sources of input
Use of unvalidated input
Unvalidated output streams

Design flaws consist of insecure implementation of security mechanisms, and they include:

Flawed authorization and access control
Flawed authorization and session management
Native code and buffer overflows
Dynamic code
Weak encryption
Application configuration
Denial of service
Network communications
Unsupported application interfaces
Improper administrative and exception handling

Desultory of an Architect - Christian Thilmany's Blog : Team Suite

Updated Team System Futures Content on codeplex.com -- Team System 2008 and Beyond

Third Party Security Code Analysis Options That Compliment VSTS 2008