The Curious Engineer

All blogs / Security

ACE Team

learn.microsoft.com/en-us/archive/blogs/ace_team

SecurityPerformance / optimizationSoftware / engineering practiceMicrosoft blogsMSDN archive

’05’10’15’20’25
Posts
118 from 14 Oct 2005 to 19 Feb 2010
Posting
archived, read-only
Kind
company blog
Feed
https://learn.microsoft.com/en-us/archive/blogs/ace_team/feed.xml

2010 2

  1. Technical Dependency Analysis
  2. Using the Business Impact Analysis

2009 44

  1. InfoSec A&P Suite: How to Install & Configure
  2. Introducing the InfoSec Assessment & Protection Suite
  3. Dogfooding: How Microsoft IT Information Security Dogfoods: Product Influence
  4. Dogfooding: How Microsoft IT Information Security Dogfoods, Phase 2: Perform an Assessment of the Features Only
  5. Dogfooding: How Microsoft IT Information Security Dogfoods, Phase 1: Conduct a Security Design Review
  6. Risk Management in Risk Tracker
  7. Dogfooding: How Microsoft IT's Information Security Dogfoods
  8. How to Integrate Risk Tracker with Internal HR Feeds
  9. Risk Tracker v1.0 Release
  10. Create a Response Time Graph
  11. Anti-XSS Library v3.1 Released!
  12. Introducing the Connected Information Security Framework (CISF) and Risk Tracker Version 1.0
  13. Blog Series: Get Familiar with the SDL-LOB Process. Introduction to Phase Five: Release for LOB
  14. Video Series: ACE Security Consultants from the Field
  15. Blog Series: Get Familiar with the SDL-LOB Process. Introduction to Phase Four: Verification for LOB
  16. Blog Series: Get Familiar with the SDL-LOB Process. Introduction to Phase Three: Implementation for LOB.
  17. Blog Series: Get Familiar with the SDL-LOB Process, Introduction to Phase Two: Design for LOB
  18. Blog Series: Get Familiar with the SDL-LOB Process, Introduction to Phase One: Requirements for LOB
  19. Blog Series: Get Familiar with the SDL-LOB (Security Development Lifecycle for Line-Of-Business Applications) Process
  20. How Do I: Set Up Fiddler’s Reverse Proxy to Create a VSTS 2008 Web Test
  21. TechNet Webcast: Configuring with Least Privilege in SQL Server 2008 (Level 300)
  22. TechNet Webcast: Fundamentals of Third-Party Security Management (Level 300)
  23. Infrastructure Security Design Review
  24. ACE Infrastructure Security Services: An Overview
  25. Security as a Service: A Balancing Act
  26. About ACE’s Information Security Assessment Service - Your Friendly Neighborhood Security Auditor
  27. VSTS Web Test Step-by-Step Primer: 7-Minute Video by Microsoft A.C.E. Performance Engineer Chris Lundquist (with Copious Notes and Screen Shots from Your Humble Correspondent)
  28. Shrinking Budgets: Application Security Tools vs Process Tradeoff
  29. About ACE’s Infrastructure Security Team
  30. ACE Team's Performance Development Lifecycle (PDL-IT )
  31. Akshay’s Uncertainty Principle: Observing Some Metrics Changes Them
  32. Vulnerabilities in Web Applications due to improper use of Crypto – Part 4
  33. Performance Development lifecycle for IT - Part 3
  34. Performance Development lifecycle for IT - Part 2
  35. Response to InfoSec X Prize Part 1
  36. Performance Development life cycle for IT – Part 1
  37. Baking Security In: A Comic Strip View of SDL
  38. neXpert v1.0 Released!
  39. Webcast: Software Security with Static Code Analysis Using CAT.NET
  40. Microsoft IT Solutions: Full Drive Encryption using BitLocker
  41. Note to Fannie Mae: Dealing with Logic Bombs
  42. Vulnerabilities in Web Applications due to improper use of Crypto – Part 3
  43. The InfoSec X Prize: Fundamental Change Through Competition
  44. Webcast on Recently Released Anti-XSS & CAT.NET

2008 25

  1. New versions of Anti-XSS & CAT.NET available today and some background and history about the ACE team
  2. Performance Monk and the Deadly Duo
  3. The Secrets Of High Performance Consulting From ACE Performance Engineer
  4. Vulnerabilities in Web Applications due to improper use of Crypto – Part 2
  5. Vulnerabilities in Web Applications due to improper use of Crypto – Part 1
  6. Disk Partition Alignment (Sector Alignment): Part I: Slide Deck
  7. IE7 vs. IE8 in VSTS 2008 SP1 Load test
  8. How to simulate IE Caching in VSTS 2008
  9. Improving Smart Client Performance using IIS 6 Native Compression
  10. ASP.NET Performance: High CPU Utilization Case Studies And Solutions
  11. Meter This: Practical Application Of Power Drain Attack
  12. Security Code Review – String Search Patterns For Finding Vulnerabilities In ASP.NET Web Application
  13. Application Security Development Lifecycle 5A: Is Threat Modeling Right For You?
  14. Application Security Development Lifecycle 4: Finding the right security talent
  15. How Microsoft IT does Secure Application Development: Webcast
  16. Using Threat Models Beyond the Design Stage
  17. Security priorities are changing for Canadian organizations
  18. Increase the TCO, kill the project: An ad-hoc analogy
  19. Application Security Development Lifecycle 3: Funding Models
  20. Front Range web application security summit in Denver
  21. Application Security Governance 2: Mandatory or Not?
  22. IIS7 Admin Pack Offers Built In Performance Analysis Reports
  23. Improve .Net Applications Performance Effectively And Efficiently
  24. Do You Really Need A Distributed Architecture?
  25. Generate Your Own Security Code Review Checklist Document Using Outlook 2007

2007 20

  1. XSSDetect FAQ
  2. Operation has timed out from class library in COM+
  3. XSSDETECT: Analyzing Large Applications
  4. Update: Some details on how XSSDetect does dataflow analysis
  5. XSSDetect Public Beta now Available!
  6. ASP.NET ValidateRequest does not mitigate XSS completely
  7. Given enough eyeballs all bugs are shallow: True or False?
  8. System.URI.AbsolutePath Vs Phishing Attack
  9. Web Service Security Guidance
  10. Mark Curphey joins Microsoft's ACE Team
  11. More eyeballs for .Net Framework code
  12. Silverlight security MSDN magazine article
  13. Just learned how to cross-post via MetaWeblog API
  14. ASP.NET File Upload: How to prevent network clogging
  15. AES Vs. 3DES block ciphers
  16. Application Security Guidance - User and Password Management
  17. Threat Modeling – Sanity Check List
  18. Application Security Guidance - Session Management
  19. S E C U R E Acrostic
  20. New addition to the ACE Team from India!

2006 23

  1. Microsoft Anti-Cross Site Scripting Library V1.5 is Released!
  2. ACE's interview with Scoble on Channel 9 - part II & III now up
  3. ACE Team's interview with Scoble on Channel 9 - pt 1
  4. ACE Services Drops Case Study Flick on Security Development Lifecycle for IT
  5. Considering the performance impact of your test data source
  6. ACE is hiring Security people in Hyderabad, India
  7. Fast and Secured: Performance Impact of SSL
  8. Fast and Secured: Perspective on Performance and Security in IT
  9. Planning for Application Performance Review/Testing
  10. Verifying the Results of your Automated Performance Test
  11. USABILITY ENGINEERING
  12. We're still hiring, take a look at this new position job description
  13. What would you like the ACE team to discuss on Channel 9?
  14. Are you passionate about Security?
  15. ACE Team Performance Checklist
  16. Crypto Key Generation & Management
  17. Risk Management in Information Security
  18. What’s the difference between IOSEC and the Microsoft Anti-Cross Site Scripting Library?
  19. ACE Team Tools and Libraries Part I - IOSEC
  20. Threat Analysis & Modeling Launch
  21. ACE Team at RSA '06!
  22. DotWhat Part 1: What's new in 2.0?
  23. Evaluating third-party solutions for security continued…

2005 4

  1. Evaluating third-party solutions for security
  2. Spam at Microsoft
  3. State of Security
  4. Intro