Security issue of MSDN is out today
The annual Security issue of MSDN is out, and you should find a copy in your local book or magazine store. Or, if you like, you can read the issue online at https://msdn.microsoft.com/msdnmag.
I wrote an article in this issue outlining a method to reduce attack surface, you can read it here https://msdn.microsoft.com/msdnmag/issues/04/11/AttackSurface/default.aspx. I really believe attack surface reduction is just as important as security education, code reviews, threat models, coding best practice, better libraries, defensive methods (firewall, /GS, NX etc) security testing, fuzz testing and so on.
Why do I think it's so important? Read the article and find out :)
Finally, you can look at back issues of the MSDN Security issues here:
2003 - https://msdn.microsoft.com/msdnmag/issues/03/11/
2002 - https://msdn.microsoft.com/msdnmag/issues/02/09/
Comments
- Anonymous
October 20, 2004
There's a link to a very interesting over at Michael Howard's blog commenting that the Security issue of MSDN is out today. The article linked from the posting is very interesting as well in that it talks about reducing attack... - Anonymous
November 01, 2004
its very good - Anonymous
May 05, 2007
PingBack from http://www.muscetta.com/2004/10/20/attack-surface/