Browse by Tags
All Tags »
IIS (RSS)
RV here... With the release of Web Protection Library v1.0 (WPL) Security Runtime Engine (SRE) has been significantly updated. It now includes a SQL Injection Detection module which can detect certain attack vectors. It also include re-designed configuration
Read More...
Hello, Randy Evans here. I am a principal developer on the Information Security Tools Team. In a recent project, we had a intranet web site that called an IIS hosted WCF service. The WCF service, in turn, called a SQL Server Reporting
Read More...
Syed Aslam Basha here. I am a tester on the Information Security Tools team. In our team am responsible for setting up and maintaining test servers. At times the servers are remotely located and doesn’t respond and you need to restart them. You can contact
Read More...
Syed Aslam Basha here. I am a tester on the Information Security Tools team. To test the tools which we develop on the team, at times I need to build a website and publish it. I use a simple way of publishing websites from the command line that saves
Read More...
Hi Anil Chintala here. I am working on a requirement for a Portal, which is to share the look and feel of the portal by multiple web applications seamlessly and without any rework. I started doing some prototyping work and writing up some scenarios we
Read More...
Vineet Batta here, A little known but excellent features of ASP.NET is it’s ability to give support teams the ability to monitor the health of ASP.NET applications. In this article I will dwell on out of box features. No custom classes or code to be written.
Read More...
Vineet Batta here again… Some time back one of our applications was released into production and since the application data was HBI we were required to protect data both in a rest and a transit. For transit we enabled SSL, that is the link
Read More...
Raju Bhan here, I am a PM on the Information Security Tools team If you haven’t had a chance to go through my last blog about ensuring identity consistency, please check it out here since Easy ID is an extension of that. Easy ID was created to
Read More...
RV here… I wanted to share with you some tidbits on our new project called Web Protection Library (WPL) which contains libraries to protect web applications from common vulnerabilities and attacks. Our goal is to offer comprehensive web application protection
Read More...
Mark Curphey here (Follow me using @curphey on Twitter ). June is a busy time of year around MSFT. For most teams you have a pretty good idea about your budget for the next year (July – July) and the end of year performance review cycle kicks in. You
Read More...
Nawal Kishore Gupta here. I am a developer on the Information Security Tools team focused on building host security assessment tools. IIS: Admin Base Objects (ABO) ABO is the most powerful way to control the IIS meta-base settings on different IIS Versions
Read More...