Things Mark Flory Forgets

Because Who Needs Memory When There is the Internet
posts - 14, comments - 12, trackbacks - 0

My Links

News

Twitter












Archives

Post Categories

Security

Articles about Secure Coding Practices.
SafeCode's Fundamental Practices for Secure Software Development
Several blogs I follow have mentioned that SafeCode has released there Fundamental Practices for Secure Software Development guide. I had thought that this was released a while ago actually and the document is dated October 8th. Oh well, it is a good reference regardless. The mission of SafeCode.org is "SAFECode is dedicated to increasing trust in information and communications technology products and services through the advancement of proven software assurance methods." They have a number of different...
  • Share This Post:
  • Share on Twitter
  • Share on Facebook
  • Share on Technorati

Posted On Tuesday, December 09, 2008 9:23 AM | Feedback (0) | Filed Under [ Security ]

Microsoft's SDL Optimization Model
Microsoft's SDL Optimization model is for moving your organization along in their Security Development Lifecycle. The SDL is really born out of a lot of lesson's learned and pain realized by Microsoft over the years. The idea is to build into your development process a more security centric focus throughout the lifecycle. The Optimization Model follows this diagram: The idea here is to first determine where your organization is at, figure out where you want to be, and determine how to get there....
  • Share This Post:
  • Share on Twitter
  • Share on Facebook
  • Share on Technorati

Posted On Monday, December 08, 2008 12:49 PM | Feedback (0) | Filed Under [ Security ]

Generating VSTS 2008 Coverage statistics
I needed to be able to execute automated unit tests essentially command line for several different projects I am involved in. That is easy enough to do with mstest.exe (I am using FinalBuilder so it is even easier than that). What is not so easy is to gather the corresponding coverage statistics in something useful (i.e. XML). I need to do that because I use a tool called NDepend to analyze our code base and it only understands the XML coverage file. It took me a while to get it all figured out so...
  • Share This Post:
  • Share on Twitter
  • Share on Facebook
  • Share on Technorati

Posted On Thursday, September 04, 2008 10:19 AM | Feedback (1) | Filed Under [ Security ]

Powered by: