Skip to main content
Sign in
HomeLibraryLearnDownloadsSupportCommunityForums

Getting Started

Security Forums

Featured Security Content RSS Feed

MSDN | Security Developer Center

Get the latest Security Updates
Download the security updates for Microsoft Windows, Microsoft Expression, and Microsoft Visual Studio.
Get the Microsoft Security Development Lifecycle toolset – it’s free
Download the templates and tools made available at no cost by Microsoft to help you automate SDL practices.
Microsoft's Security Talk Series: Discusses the latest in security & privacy
Join the discussion with a diverse group of leading security and privacy experts in this informative series of webcasts. These discussions help you gain insight and prescriptive guidance on a variety ... more
Write more secure code with the Microsoft Security Development Lifecycle (SDL)
Download the Simplified Implementation of the Microsoft SDL to learn about the software development security activities you should perform in order to improve the security of your code.
Announcing WIF support for Windows Server 2003
Windows Identity Foundation (WIF) RTW for Windows Server 2003 is available NOW! This release supports both Windows Server 2003 SP2 and Windows Server 2003 R2 platforms and following seven languages: E... more

More Security "How Do I" Videos >

SDL Team Blog RSS Feed

A Microsoft-wide initiative and a mandatory policy since 2004, the Security Development Lifecycle (SDL) introduces security and privacy early and throughout the development process. Combining a holistic and practical approach, the SDL is risk-based with the goal of protecting end-users by reducing the number and severity of vulnerabilities in code.

Identity Management Team Blog RSS Feed

Windows Identity Foundation enables .NET developers to externalize identity logic from their application, improving developer productivity, enhancing application security, and enabling interoperability. Enjoy greater productivity, applying the same tools and programming model to build on-premises software as well as cloud services.

MSDN Magazine: Focus on Security RSS Feed

Read in-depth security articles from the authors of MSDN Magazine.

MSDN | Security Developer Center

Screen-Based Input: Customized On-Screen Keyboards with the .NET Framework
Learn how to create an on-screen keyboard that uses key randomization in the .NET Framework to enhance security and the porting of applications to mob... more
Security Briefs: Improve ASP.NET Security with Visual Studio Code Analysis
Visual Studio code analysis and FxCop enable you to check your code automatically for design, performance and security issues. Now you can check your ... more
Security Briefs: Web Application Configuration Security Revisited
Bryan Sullivan follows up on configuration security with some relatively obscure—but important—web.config settings that should be addressed, and discu... more

Featured Downloads

Download AD FS 2.0

AD FS 2.0 is a security token service for IT that issues and transforms claims and other tokens, manages user access and enables federation and access management for simplified single sign-on.

More Security Downloads >

Application Security Tip of the Week

MSDN | Security Developer Center

Use ESAPI HTTPUtilities
Applies toJava web-based applications.SummaryUse the ESAPI library to handle several standard H... more

More Tips...

Application and Cyber Security Blog RSS Feed

Read up on software engineering, cybersecurity, and application risk management as offered by Security Innovation

MSDN | Security Developer Center

Sony CISO Reporting to Executive Management. Maybe Cyber Security Czar will follow suit?
http://web.securityinnovation.com/blog/bid/72444/Sony-CISO-Reporting-to-Executive-Management-Maybe-Cyber-Security-Czar-will-follow-suitIn my previous ... more
Why responsible disclosure is the best choice for Security Innovation
http://web.securityinnovation.com/blog/bid/70136/Why-responsible-disclosure-is-the-best-choice-for-Security-InnovationThere is a wide range of ways to... more
Sony appoints CISO in response to PlayStation attacks……but reports to the CIO?????
http://web.securityinnovation.com/blog/bid/70713/Sony-appoints-CISO-in-response-to-PlayStation-attacks-but-reports-to-the-CIOA few months ago, Sony an... more

Other Security Resources

Code Gallery

Download or share sample applications or code snippets.

CodePlexCodePlex

Microsoft's open source project-hosting site.

Channel 9Security Content on Channel 9

Watch videos and connect with your peers – it's all about the conversation.

DevLabs

Explore the projects that we are experimenting with in our labs, and let us know if they inspire you.

patterns & practices

Use Microsoft's proven practices for software engineering.

© 2012 Microsoft. All rights reserved.Terms of Use | Trademarks | Privacy Statement | Site Feedback