ACE Threat Modeling

Security Briefs

Syndication

The ACE team inside Microsoft has produced a tool (code named Torpedo) for building threat models. Similar in spirit to Swiderski's threat modeling tool that Microsoft shipped awhile back, this tool is targeted more at teams building line of business applications who don't necessarily have security experts on hand. Give it a try and send the ACE team your feedback!


Posted Mar 20 2006, 12:41 PM by keith-brown
Filed under: , ,

Comments

Nick wrote re: ACE Threat Modeling
on 03-20-2006 7:31 PM
I am a Chinese student and I am glad that you had goodtimes in my country.At this time my bussiness is about RPC authentocation, I knew that rpc without authetication cant work well due to the restriction in winxpsp2, and I added some fonctions in my code:
client RpcBindingSetAuthInfo(Handle,
"localhost",
RPC_C_AUTHN_LEVEL_DEFAULT,
RPC_C_AUTHN_WINNT,
&AuthIdentity,
RPC_C_AUTHN_WINNT)
server RpcServerRegisterAuthInfo("localhost",
RPC_C_AUTHN_WINNT,
NULL,
NULL).
And the function does work without changing the registerkey or the groupedit in sp2, and now the new demand is coming that the SSP "RPC_C_AUTHN_WINNT" in these functions have to change to "RPC_C_AUTHN_GSS_KERBEROS" to improve the security level, but the new codes always make a exception of "1747" wich refers to the Unknown authen service, have you ever met this? my eamil is zengxudong20@yahoo.com.cn,I am waitting for your callback,thank you.
Jason Haley wrote Interesting Finds
on 03-21-2006 6:38 AM
Christopher Steen wrote Link Listing - March 21, 2006
on 03-21-2006 10:22 PM
ACE Threat Modeling
[Via: Keith Brown ]
AJAX Myth - I love it............. [Via: Wallym ]
Article:...

Add a Comment

(required)  
(optional)
(required)  
Remember Me?