Welcome to MSDN Blogs Sign in | Join | Help

Browse by Tags

All Tags » Application Security   (RSS)
Tuesday, December 19, 2006 7:08 PM

Mohammad Akif on InfoQ

If you've never met or heard Mohammad Akif here's your chance! He's one of our evangelists in Toronto (my home-town!), Canada. Mohammad talks to InfoQ about service oriented-architectures (SOA) and the Security Development Lifecycle , check him out http://www.infoq.com/interviews/Mohammad-Akif
Posted by kevinlam | 0 Comments
Saturday, November 18, 2006 9:11 AM

Anti-Cross Site Scripting Library V1.5: Come Get It!

Update: The FAQ is now up as of today to help answer any initial questions you might have. Check it out on the main landing page for the librarry at http://msdn2.microsoft.com/en-us/security/aa973814.aspx . Update: We'll be posting a Web-facing FAQ shortly
Posted by kevinlam | 1 Comments
Tuesday, October 17, 2006 3:06 PM

Anti-Cross Site Scripting Library V1.5 Update

Today we released a preview copy to a select list of people and awaiting to get feedback. Very soon folks, very soon! I also spent last night and into the morning putting together a tutorial so watch out for the release of that! Thanks, -- Kevin Lam,
Posted by kevinlam | 0 Comments
Monday, October 02, 2006 9:35 PM

Thoughts On Code Scanning

Dan Sellers posted my rant on code scanning tools on his Security for Canadian Developers Blog : --- START --- Information managers, developers and testers commonly make the mistake of seeing code scanning tools as replacement for security QA processes.
Posted by kevinlam | 1 Comments
Friday, July 07, 2006 4:53 PM

Anti-Cross Site Scripting Library V1.5: Almost there ...

Just wanted to give an update and the new implementation of the Anti-Cross Site Scripting Library V1.5 is done. I re-wrote the entire library to be much more performant than the previous implementations as well as added more encoding methods for various
Posted by kevinlam | 3 Comments
Sunday, June 04, 2006 12:22 AM

More on Windows Vista's Address Space Layout Randomization (ASLR)

Check out Stephen Toulouse's blog entry here . Enjoy, Kevin -- Kevin Lam, CISSP Senior Security Technologist Microsoft Application Consulting & Engineering (ACE) Team
Posted by kevinlam | 0 Comments
Thursday, June 01, 2006 12:32 PM

Windows Vista Security: Address Space Layout Randomization (ASLR)

Michael Howard's blog entry on randomization of address space layout: http://blogs.msdn.com/michael_howard/archive/2006/05/26/608315.aspx I personally haven't seen the internals (implementation) yet, but it should be interesting on how well it affects
Posted by kevinlam | 1 Comments
Friday, May 26, 2006 4:49 PM

Where's the Microsoft Anti-Cross Site Scripting Library V1.5?

Several people have asked me when the next version of the Microsoft Anti-Cross Site Scripting (XSS) Library (version 1.5) would be released. There were some delays, and so it should be around the end of June, no guarantees though -- by the way, thanks
Posted by kevinlam | 0 Comments
 
Page view tracker