The Web and Microsoft : Security

Microsoft Source Code Analyzer

klevereblog — Wed, 25 Jun 2008 22:35:00 GMT

My team recently had discussions with our security on ways we can help developers deliver more secure code on the web. One outcome of that is the Microsoft Source Code Analyzer. This tool is specifically designed to mitigate risk from sites that are vulnerable to SQL Injection Attacks. This type of attack can particularly problematic for free code downloaded from the internet. This release scans Classic ASP code for these types of flaws. You can find it here. If your hoster pass it on to your customers.

Some interesting stats on Web Site Defacements by OS and Web Server

klevereblog — Sat, 15 Mar 2008 21:23:00 GMT

Linux leads Windows by a wide margin. It's interesting though that the synopsis is not that Windows has improved greatly from a web server security perspective, but rather, that people migrated from Windows to Linux and thus the sites are still attacked.

I got the link from Slashdot. I didn't bother to look at the comments there because I pretty much can already guess what they say. Check for yourself and form your own conclusion.

http://www.zone-h.org/content/view/14928/30/