原站：http://blogs.msdn.com/hackers/default.aspx

“hackers @ microsoft”的内容更新

累计：18 篇（自 2007-08-28 起）

更新：约4篇/年，最后更新1478 天前

hackers @ microsoft

HelloSecureWorld.com Launched

Discover the New HelloSecureWorld Security Resource www.HelloSecureWorld.com provides a powerful experience for promoting security awareness and education in the developer community by surfacing existing content as well as new. Well, If you like learning while having FUN then hellosecureworld.com is the resource for you. It brings non traditional ways ... (315 天前)

http://inezha.com/w/2r3265z

hackers @ microsoft

First Line of Defense for Web Applications – Conclu

Platform features for validating input in .NET FrameworkThere are many platform features which should be leveraged wherever possible. Some of the key validation features supported by .NET framework are given below:ValidateRequest ASP.NET performs request validation against query-string and form variables as well as cookie values. By default, if the cu... (315 天前)

http://inezha.com/w/8iasl5x

hackers @ microsoft

First Line of Defense for Web Applications – Part 5

First of all folks, my apologies for this delayed post. I have been traveling and busy doing a very interesting Threat Modeling exercise. But i am back & Lets cover some other validation bloopers - SQL injection Weak Validation ExamplesCode Snippetsa) Replacing single Quotes to double quotesSample.aspx.cs catergoryID=Request.QueryString(id);SqlCom... (315 天前)

http://inezha.com/w/oaca552

hackers @ microsoft

First Line of Defense for Web Applications – Part 4

I am on a red eye flight back to Seattle from Dulles, VA where I just finished delivering some security training. Traveling back in time, jet lagged, not able to sleep so I thought of finishing my blog post for this week to kill some time. :) Ok, so now that we have discussed the basics of input validation, let’s move on to some more interesting part of... (315 天前)

http://inezha.com/w/js3iixk

hackers @ microsoft

First Line of Defense for Web Applications – Part 3

Precaution: Are you consuming Unexpected Input Technology is developing fast and web programming languages are coming up with features or ways to ease the job of our developers. Although it brings a smile on developers face, there is a flip side to this. Attackers are exploiting these shortcuts to pass unexpected input in the applications and exploiting ... (315 天前)

http://inezha.com/w/h1ar1xn

hackers @ microsoft

Weekend Security Reading Round up Links 10/27/07

Microsoft Research Reveals New Trends in Cybercrime This is well worth reading if you're in Info Sec... I particularly was nodding my head violently yes when I read the following: "The research indicates there are tensions within organizations over how data should be managed. Security and privacy professionals see customer data as an asset to protect, wh... (315 天前)

http://inezha.com/w/gdc8bxi

hackers @ microsoft

Some technical details on how XSSDetect does Dataflo

Hi, my name is Hassan Khan. I work for the ACE Engineering Team, which is a part of the ACE (Application Consulting & Engineering) Team. We develop tools and solutions to help secure Microsoft Line of Business applications, websites and also work with Microsoft’s enterprise customers. ACE Engineering is also responsible for developing and delivering sec... (315 天前)

http://inezha.com/w/uh3xjxh

订阅者 ( 2 )

相关订阅源