http://msdn2.microsoft.com/en-us/library/ms998408.pponline(en-us,MSDN.10).gif
Welcome to patterns & practices Security Wiki
This is where we put our latest thoughts and discoveries in software security. Members from this team previously brought you Building Secure ASP.NET Applications and Improving Web Application Security. We are constantly talking to customers, industry experts, and security experts to bring you the latest and greatest. Come here to see the new, the raw, and the unfiltered; see MSDN for the most mature and fully reviewed material (Index of patterns & practices Security Guidance on MSDN--
J.D. Meier , Security/Performance PM, patterns & practices team
What's New
*
Recent Changes
Projects
*
Security Guidance for .NET 2.0 Project
Technology
*
.NET Framework 1.1 *
.NET Framework 2.0 *
ADO.NET 1.1 *
ADO.NET 2.0 *
ASP.NET 1.1 *
ASP.NET 2.0
Type
*
Case Studies *
Code Examples *
Checklists *
Explained *
FAQs *
Guides *
Guidelines *
How Tos *
Links *
Practices *
Reference Implementations *
Question Lists *
Scenarios and Solutions *
Security Stories *
Test Cases *
Tools *
Training Modules
Topic
*
Application Security Methodology *
Database Server Security *
Information Models *
Security Code Review *
Security Deployment Review *
Security Design Guidelines *
Security Design Review *
Security Engineering *
Server Security Methdology *
Threat Modeling *
Web Application Security *
Web Server Security
Methodology
At the base of any good guidance is a solid methodology. Think of methodology as the skeleton. If you are curious about the underlying principles that we’ve used to think about security then explore these links.
*
Application Security Methodology *
Security Engineering *
Server Security Methodology
Community
*
Community Code Examples * Shaping Software:
http://ShapingSoftware.com * Software Guidance Share: http://www.guidanceshare.com/wiki
* Sources of Insight: http://sourcesofinsight.com
How To Use This Wiki
If this is your first visit to this site, or your first exposure to a Wiki then you’ll find the following links useful:
*
Test Drive Security Wiki – Explains each type of resource we’ve posted and gives an example of the best of each.
*
Getting Started with Security Wiki – If you’re new to the wiki concept then read this to learn more.
*
Subscribe to the RSS Feed – If you want to be updated when new content is posted, read this to learn how.
Feedback
You need to login to Channel9 to comment in the Wiki.
* To give general feedback, use
Security Wiki Feedback * Share your security story at
Security Stories * To give feedback on a specific page, see
How to Provide Feedback