Attack Surface Analyzer BETA

Microsoft has released Attack Surface Analyzer. It is a Software Development Lifecycle verification tool for developers and IT professionals to identify whether newly developed or installed applications inadvertently change the attack surface of a Microsoft operating system.

Attack Surface Analyzer is developed by the Security Engineering group, building on the work of our Security Science team. It is the same tool used by Microsoft’s internal product groups to catalogue changes made to operating system attack surface by the installation of new software.
Attack Surface Analyzer takes a snapshot of your system state before and after the installation of product(s) and displays the changes to a number of key elements of the Windows attack surface.
This allows:

  • Developers to view changes in the attack surface resulting from the introduction of their code on to the Windows platform
  • IT Professionals to assess the aggregate Attack Surface change by the installation of an organization’s line of business applications
  • IT Security Auditors evaluate the risk of a particular piece of software installed on the Windows platform during threat risk reviews
  • IT Security Incident Responders to gain a better understanding of the state of a systems security during investigations (if a baseline scan was taken of the system during the deployment phase)

The free tool is downloadable from Attack Surface Analyzer – Beta Download.

.NET Framework 4 availability on Server Core

.NET.NET Framework 4 will be supported as a Server Core installation option on Windows Server 2008 R2 Service Pack 1.

Like in .NET 2.0 and .NET 3.5, with .NET Framework 4, you will be able to build and run managed applications that use ASP.NET, WCF, WF, Windows Services and Console Applications.

Read more at .NET Framework 4 availability on Server Core.

Developing and Moving Applications to the Cloud-Azure Labs

There are 2 new series of Hand-On-Labs related to Windows Azure.

The first, Moving Application to the Cloud & the second, Developing Applications for the Cloud. Download and try!

Microsoft WebMatrix

WebMatrixWebMatrix is a brand new web development tool from Microsoft that includes everything you need for website development. Start from open source web applications, built-in web templates or just start writing code yourself. It’s all-inclusive, simple and best of all free. Developing websites has never been easier.

To learn and try WebMatrix go to:

You’ll find there how to write a simple Web Application using WebMatrix, CSS, HTML, HTML5, ASP.NET, SQL, Databases and more in just a couple of hours. You’ll also learn how to deploy your application using WebDeploy and hosting providers within WebMatrix!

Silverlight Firestarter Labs

The Silverlight Firestarter is a one day, global, live streamed and on-demand event keynoted by Scott Guthrie on Dec 2nd 2010. You can watch the Firestarter keynote that introduces Silverlight 5 and the Firestarter session videos from this page.

The Silverlight team launched 11 new labs with brand new content that can be viewed online or downloaded in an offline training kit.

This Silverlight 4 Firestarter Training course was created to enable fast adoption of Silverlight for line of business applications. All the labs are very practical oriented and provides a real-world samples used in Silverlight Line of Business (LOB) applications.

The course is built from 11 modules. Each module has 1 lab and 1 or more videos. All the labs provide comprehensive hands-on walkthrough and final solutions.


%d bloggers like this: