Security - Maor's Blog

Browse by Tags

Attack Surface Analyzer BETA: Microsoft has released Attack Surface Analyzer. It is a Software Development Lifecycle verification tool for developers and IT professionals to identify whether newly developed or installed applications inadvertently change the attack surface of a Microsoft...
Posted 29 January 2011 02:07 PM by maor.Blogging();
תגים:Security, Tools, Software Development

Data Security On Windows Azure: The patterns & practices team is writing Azure Security Guidance as a series of application scenarios and solutions. The goal is to show the most common application scenarios on the Microsoft Azure platform. Patterns that described in the article...
Posted 21 May 2010 10:58 PM by maor.Blogging();
תגים:Security, Windows Azure, Cloud Computing

How to prevent SQL injections: Many applications include code that looks like: 1: string sqlStmt = "SELECT * FROM USERS WHERE UserName= '" + un + "' AND Password='" + pwd + "'" ; Admit it...it's ugly, but you constructed SQL statements like this one. The variables un,pwd are provided by the user. The problem with this SQL string is that the attacker can piggyback SQL statements in one of them. What if the attacker enters this: un = maor, pwd = 123456' OR 1=1 . The following...
Posted 20 October 2007 01:34 AM by Maor David-Pur | 5 comment(s)
תגים:.NET, C#, Security, SQL Injection

Secure your application: Worried about security? Microsoft has published patterns & practices Security Checklists Index for .NET framework 1.1 & 2.0. You can find there: Architecture and Design Review Checklists Code Review Checklists Deployment Review Checklists Take care...
Posted 02 June 2007 07:54 PM by Maor David-Pur | with no comments
תגים:.NET, Patterns & Practices, Security

Search

Go

This Blog

News

RSS

Connect with Me

Tags

Navigation

Blog Roll

RSS

Blog Pages

Syndication