patterns & practices Security Engineering Cheat Sheet
We posted our patterns & practices Security Engineering Cheat Sheet to our Application Architecture Knowledge Base on CodePlex. It’s a bird’s-eye view of applying our security techniques to the life cycle. The techniques and approach shipped with VSTS/MSF Agile starting in 2005.
Security Engineering Overlay
Here’s a view that overlays our key patterns & practices security techniques alongside common software engineering activities:
Key Activities in the Life Cycle
The core activities you should consider performing include the following:
- Security Objectives.
- Threat Modeling.
- Security Design Guidelines.
- Security Design Inspection.
- Security Code Inspection.
- Security Testing.
- Security Deployment Inspection.
You can read more about these techniques and how to apply them to your software architecture and your software development life cycle on our Cheat Sheet – patterns & practices Security Engineering.
Additional Resources
- Security Engineering (Guidance Share)
- patterns & practices Security Engineering Explained (MSDN)
- patterns & practices Threat Modeling Web Applications (MSDN)
My Related Posts
patterns & practices Performance Engineering Cheat Sheet
New Release: patterns & practices App Arch Guide 2.0 Beta 2
Microsoft Presentation, Data Access, Workflow and Integration Technology Cheat Sheets
Comments
Anonymous
November 20, 2008
The comment has been removedAnonymous
December 12, 2008
What means Security Design Guidelines?Anonymous
December 12, 2008
It simply means putting together checklists for key design decisions. This one is a good place to start - http://msdn.microsoft.com/en-us/library/aa302332.aspxAnonymous
December 18, 2008
a {color : #0033CC;} a:link {color: #0033CC;} a:visited.local {color: #0033CC;} a:visited {color : #800080;}