Welcome to MSDN Blogs Sign in | Join | Help

Michael Howard's Web Log

A Simple Software Security Guy at Microsoft!

May 2007 - Posts

Oil Change or Culture Change
Dave Ladd has just posted a very interesting and thought provoking post over on the SDL blog: http://blogs.msdn.com/sdl/archive/2007/05/31/oil-change-or-culture-change.aspx Read More...
Half Of Windows Vista Adoption Driven By Security
I think I earned my paycheck this week :) http://www.informationweek.com/news/showArticle.jhtml?articleID=199701141 Read More...
Secure coding lessons from Microsoft
Last week we had some tech journalists visit Redmond to discuss security products and, in my case, security engineering. One of the attendees, Mari-Len De Guzman, wrote a really balanced, non-alarmist analysis of the talk. It's a good read (IMHO!) Read More...
Windows Vista ISV Security Paper Available
Matt Thomlinson and I wrote a document explaining how to take advantage of some of the buffer overrun defenses in Windows Vista. The document is now available here . Enjoy :) Read More...
More on security education, or lack of...
Following on from my blog post yesterday about Dave Ladd's education vs training comments over on the SDL blog, Michael Desmon of Redmond Developer News has posted an interview we had on this subject, and asks for some input: "Tell us what your company Read More...
Security Education v. Security Training
David Ladd, a partner in crime, has just made a post on the SDL blog about Security Education. He starts: "There has been a lot of hoopla lately around "secure programming skills" – with not-so-thinly veiled condemnations of academicians and the role Read More...
Page view tracker