Network Security White Papers

Threat Modeling at Microsoft

Overview A key component of the Microsoft Security Development Lifecycle (SDL) is threat modeling. Threat modeling, which occurs before coding begins, is performed to ensure that features and functionality are designed with security in mind. SDL program manager Adam Shostack discusses Microsoft's approach to threat modeling as follows: "One has a very specific set of design analysis techniques that the author ask his teams to engage in before coding begins, as part of the security development life cycle. People in the security industry approach threat modeling in many different ways; at Microsoft, they've experimented with most of these at different times. Threat modeling can be a requirement solicitation technique or a design analysis technique, but one often focuses on threat modeling from the perspective of assets."

Further White Paper Details
PublisherMicrosoft File FormatPDF
Date PublishedDecember 2008
FormatWhite Papers   
Topics

Balancing Security Against Productivity

What makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending attacks or preventing them? When IDG Research Services queried...

Security: New strides in preventing intrusions.

Need help eliminating risk in your IT environment? This ForwardView webshow describes how security appliances, which incorporate an array of security functions, can help you ward off security breaches without...

MessageLabs Intelligence : 2009 security Predictions

Having analyzed the global threat landscape for almost a decade, MessageLabs Team Skeptic™ is comprised of many world-renowned malware and spam experts who have a global view of threats across...

IDC Vendor Spotlight

Organised ubiquity is a must for organisations to sucessfully "project" their users in any given landspace, at any given time, with secuirty policy. This White Paper covers issues surrounding secure...

Trend Micro Enterprise Security white paper

This white paper reviews the content security threat landscape and how it has evolved into a more dangerous and high risk environment. The paper discussed how conventional content security approaches...


Quick Sitemap Links: