Security Briefs: XML Denial of Service Attacks and Defenses

Many companies starting out with the SDL are doing so in combination with a security compliance program. We'll show you some best practices and pitfall we've seen when employing SDL principles for compliance.Brad HillMSDN Magazine February 2010

There are many ways to test WCF services, but the socket-based approach is flexible and very useful for security and performance testing. We show you show you how to test a WCF service using a network socket based approach.James McCaffreyMSDN Magazine February 2010

Many early adopters cloud platforms have questions about security. We review some of the cryptography services and providers in Windows Azure along with some security implications for applications in the cloud.Jonathan WiggsMSDN Magazine January 2010

The .NET Framework 4 introduces many updates to the .NET security model that make it much easier to host, secure and provide services to partially trusted code. This article dives into the many features and benefits of the .NET security model.Andrew DaiMSDN Magazine November 2009

This column how to build clients applications based on the REST architecture using HTTP AP1s. The article describes how to address the question of autogenerated types and code.Jon FlandersMSDN Magazine October 2009

This article describes aspects of using routers with the .NET service bus, especially their use in a message-based architecture.Juval LowyMSDN Magazine October 2009

John Charles OlamendyMSDN Magazine September 2009

This article explores the use of threat modeling to address security concerns in your applications.Michael HowardMSDN Magazine September 2009

Even if you use only the most secure algorithms and the longest key lengths, there's no guarantee that the code you write today will remain secure. A better alternative is to plan for agility from the beginning. Rather than hard-coding specific cryptographic algorithms into your code, use one of the crypto-agility features built into the Microsoft .NET Framework. This article shows you how.Bryan SullivanMSDN Magazine August 2009

This month's column answers frequently asked questions about implementing REST.Jon FlandersMSDN Magazine July 2009