Security for Canadian Developers

Security Development Lifecycle Webcast

On June 20th, we will be putting on a webcast entitled " The Microsoft Security Development Lifecycle (SDL) - Continuous Improvement and Demonstrated Results ". The Security Development Lifecycle is a process that is constantly evolving and has two main

8 Simple Rules For Developing More Secure Code

While surfing the Web, I came across the following article written by Michael Howard. The article really resonated for me because it covered the following points: Using analysis tools and experts to review your code (which can be accomplished with tools

Developer Windows Vista Security Webcast in May

As you can tell, there is a lot of activity going on with regards to Windows Vista. On May 23rd, we will be running a webcast entitled " Writing Secure Applications for Windows Vista ". Here is an abstract of the presentation: Have you tested your application

[Guest Blog] User Account Control for Developers

Kenny Kerr is our guest blogger this month. Here is his bio: Kenny Kerr is a founding employee and Chief Software Architect at PlateSpin Ltd. where he designs and builds new products and helps drive the technical direction for PlateSpin’s market-leading

IT Professional Security Webcasts

Rodney Buike , my counterpart on the IT Pro team has set up a security webcast series which may be interesting to you. Here is a description of the series and the events: With every new OS release security is improved and refined and with Windows Vista

[Guest Blogger] Kevin Lam Thoughts on Code Scanning Tools

Kevin Lam (Redmond, Washington) [Guest Blogger] Thoughts on Code Scanning Tools Information managers, developers and testers commonly make the mistake of seeing code scanning tools as replacement for security QA processes. As a result they get a false

An Application or Device is Only as Secure as it was Tested Against

It still amazing in this day and age how many Security Professionals, Developers and Architect still believe in the Silver Bullet and automatically accept an Application is Secure becomes someone says it is. The quick and easy way out does not work when