Warnings, /sdl, and improving uninitialized variable detection
Tim Burrell and Thomas Garnier of the TwC Security Science team present the sixth and last blog installment describing more /sdl functionality in Visual Studio 2012 RC.
Threat intelligence
The Microsoft Threat Intelligence community is made up of world-class experts, security researchers, analysts, and threat hunters who analyze 100 trillion signals daily to discover threats and deliver timely and timely, relevant insight to protect customers. See our latest findings, insights, and guidance.
Refine results
Topic
Products and services
Publish date
Tailored AI insights from Microsoft Security Copilot
Empower your defenders to detect hidden patterns, harden defenses, and respond to incidents faster with generative AI.
-
SDL Training
Hi everyone, Shawn Hernan here. Being a security guy is incredibly rewarding because you get to look at virtually any part of a product, from kernel drivers to web services to user education to sales and servicing. -
The Trouble with Threat Modeling
Adam Shostack here. I said recently that I wanted to talk more about what I do. Go beyond data protection with Microsoft Purview
Govern, protect, and manage all of your data with Microsoft Purview, comprehensive solutions to help give you better visibility and control.
-
Testing in the SDL
“You can’t test quality in.” It’s a truism coined long ago and an accepted fact of software development. -
Linus’s Law aka “Many Eyes Make All Bugs Shallow”
How many of you have heard “many eyes make all bugs shallow”? My guess is that many of you have and that it may have been in conjunction with an argument supporting why Linux and Open Source products have better security. -
The Importance of the “Evaluated Configuration” in Common Criteria Evaluations
How many of you have heard of the Common Criteria ? If you’ve ever done security work with government, you probably have.
