Welcome to MSDN Blogs Sign in | Join | Help

Post Webcast: Is Your App Secure?

Unfortunately, right at the very end of today's Webcast we experience a small technical difficulty with the on-line evaluation form.  If you were not able to fill out the evaluation and you attended today's session can you please do so now, here.

The moral of today's Webcast was to show that there are many readily available tools you can use to quickly test for potential security vulnerabilities in an application that you contracted out to be developed. By no means are we suggesting these simple techniques is all you have to do to validate a claim made by a vendor that their application is secure. 

But rather, the goal was to show that there a lot of tools you can use to do some preliminary security test and not take security for granted.  Most likely, if you find security vulnerabilities by using these tools then you probably found low-hanging fruit.  And if you can these low-hanging fruit then you can bet there are much more subtle and series security vulnerabilities.

Here is a list of the tools we showed today and where you can find them:


AccessEnum www.sysinternals.com Reports on ACL
SubinACL Windows 2003 Resource Kit Powerful ACL Manager
Filemon www.sysinternals.com Monitor File system calls
Regmon www.sysinternals.com Monitor Registry Calls
Process Explorer www.sysinternals.com Task Man on steroids
SQL Profiler Optional with Microsoft SQL Server Monitors SQL Statements
Fiddler www.fiddlertool.com Modify http data

Within the next couple of days a recording of today's Webcast and to register for upcoming monthly security talks can be found at:

http://msdn.microsoft.com/canada/securitylockdown/...

Today is my last day at Microsoft Canada and you will be in good hands with Jean-Luc David and the Security Team.

Happy Security Hunting!

Published Wednesday, October 18, 2006 1:22 PM by dansellers

Comments

# Security for Canadian Developers Post Webcast Is Your App Secure | Indoor Grills

Anonymous comments are disabled
 
Page view tracker