Printer Friendly Version      Send     
Click to Rate and Give Feedback
Popular Articles
Our security experts present 10 vulnerable pieces of code. Your mission is to find the holes (a.k.a. bad security practices) in the code.

By Michael Howard and Bryan Sullivan (November 2008)
Here is an ASP.NET AJAX data-driven Web application that takes the best features from server- and client-side programming to deliver an efficient, user-friendly experience.

By Bertrand Le Roy (October 2008)
Learn how to automate custom SharePoint application deployments, use the SharePoint API, and avoid the hassle of custom site definitions.

By E. Wilansky, P. Olszewski, and R. Sneddon (May 2008)
We introduce you to the benefits of building composite applications with the Composite Application Guidance for WPF from Microsoft patterns & practices.

By Glenn Block (September 2008)
More ...
Read the Blog
We're currently in the process of stepping back and taking a critical look at our Web site to see how you all are using it - and how we can redesign parts of it (big or small) to make that experience better.  We are continuously receiving your feedback on existing frustrations and we are working hard to remedy those (as a general fyi, most of the frustrations have to do with navigation).  ...
Read more!
Visual Studio 2008 Team Foundation Server Build (better known as Team Build) is a core feature of Team Foundation Server 2008. Microsoft designed Team Build to be an industrial-strength build automation tool. In the November 2008 issue of MSDN Magazine, Brian A. Randell introduces you to Team Build ...
Read more!
Silverlight and SharePoint provide a simple, yet powerful, infrastructure for building intranet and extranet applications with sophisticated user interface designs and interactions. In the November 2008 issue of MSDN Magazine, Steve Fox and Paul Stubbs demonstrate how ...
Read more!
It’s helpful to think about secure design from a more holistic perspective by using threat models to drive your security engineering process. In the November 2008 issue of MSDN Magazine, Michael Howard proposes using the threat model ...
Read more!
So many factors can affect the performance of a Web page—the distance between server and client, the size of the elements on the page, how the browser loads these elements, available bandwidth. Finding those bottlenecks and identifying the culprits is no easy task. In the November 2008 issue of MSDN Magazine, ...
Read more!
Choosing the best alternative is a common task in software development and testing. A group of beta users may need to choose the best user interface from a set of prototypes. Or imagine the members of an open source project voting for a policy. In the November 2008 issue of MSDN Magazine, Dr. James ...
Read more!
More ...
November2008 November 2008
Security Quiz: Test Your Security IQ
Our security experts present 10 vulnerable pieces of code. Your mission is to find the holes (a.k.a. bad security practices) in the code. Michael Howard and Bryan Sullivan
Agile SDL: Streamline Security Practices For Agile Development
Bryan Sullivan discusses the new SDL for Web applications and Agile projects with more compressed release cycles. Bryan Sullivan
Access Control: Understanding Windows File And Registry Permissions
Understanding the ACLs that govern permissions and rights before an operation is allowed to proceed is critical to enhancing security. John R. Michener
Utility Spotlight: 12 Steps To Faster Web Pages With Visual Round Trip Analyzer
Download Visual Round-trip Analyzer (VRTA) to uncover the root of your Web page loading problems and identify these 12 common ailments. Jim Pierson
RIA: Light Up SharePoint With Silverlight 2 Web Parts
Find out how to integrate SharePoint and Silverlight by creating a Silverlight media player and deploying it as a SharePoint Web Part. Steve Fox and Paul Stubbs
Code Download (52308 KB)
.Chm Files

Columns
Editor's Note: Can I See Some Identification?
Security measures are highly context driven and change with circumstances. This month Howard Dierking spins a few security yarns to illustrate. Howard Dierking
Toolbox: Online Scheduling, Jeff Smith’s SQL Blog, Easy Regular Expressions, And More
This month Scott looks at improving development skills, writing regular expressions, a web scheduling control and a SQL tips blog. Scott Mitchell
CLR Inside Out: International Applications
The CLR team takes a look inside the System.Globalization namespace to explain how to handle data formats for proper localization and globalization. Melitta Andersen
Data Points: Cloud Gazing From Silverlight 2
John Papa tackles questions about calling services from Silverlight 2 applications. John Papa
Cutting Edge: Browser Interoperability In Silverlight 2
This month Dino Esposito explains how the browser interoperability layer in Silverlight addresses a number of your Silverlight / Web page interaction needs. Dino Esposito
Security Briefs: Threat Models Improve Your Security Process
Using threat models to drive your security engineering process helps prioritize the code review, fuzz testing, and attack surface analysis tasks. Michael Howard
Test Run: Group Determination In Software Testing
There is a large body of research on group techniques to determine the best alternative from a set of options. Dr. James McCaffrey outlines five of them. Dr. James McCaffrey
Wicked Code: Silverlight 2 Transforms And Clipping Regions
Silverlight is powerful enough to let you easily build an image magnification feature for you web site with very little code, most of which is XAML. Find out how. Jeff Prosise
Foundations: Unit Testing Workflows And Activities
Matt Milner takes a look at some of the challenges and techniques related to testing Windows Workflow Foundation activities, workflows, and associated components. Matt Milner
Team System: Team Build 2008
Brian Randell introduces you to Visual Studio 2008 Team Foundation Server Build (Team Build). Then he creates and runs a team build. Brian A. Randell
{ End Bracket }: Engineers Who Write
Writing is good exercise for developers and software engineers. Richard Ward explains how writing can help you focus your thoughts and communicate more precisely. Richard Ward
© 2008 Microsoft Corporation and CMP Media, LLC. All rights reserved; reproduction in part or in whole without permission is prohibited.
Page view tracker