Sunday, September 20, 2009

Microsoft application assessment tools


As mentioned in the previous blog cybercriminals are increasingly attacking applications and hence it is critical to develop secure applications through standardized SDLC processes. Microsoft offers many tools to test and validate the security of the developed application and recently they released number of tools in this area


Risk Tracker tool that manages and tracks information security risk.

BinScope Binary Analyzer. Microsoft says that their developers and testers are required to use this tool as part of the SDL. It analyzes the binaries for a wide variety of security protections such as detecting stack-based buffer overflows and ensuring safe exception handling

CAT.NET v1 CTP is a binary analysis tool to identify XSS, SQL Injection and XPath Injection in the code.

No comments: